Threats

Hackers Turn Popular Chinese Keyboard Software Into a Backdoor for Cyberespionage Attacks

A China-aligned hacking group is abusing Sogou Input Method, one of the most popular Chinese typing tools, to secretly install…

12 hours ago

HYFLOCK Ransomware Encrypts Only First 4KB of Larger Files, Leaves Parts of Victims’ Files Accessible

HYFLOCK ransomware has an encryption weakness that leaves parts of larger files readable, giving affected organizations a limited chance to…

13 hours ago

ARTEX Hackers Expose Their Own Servers, Revealing AI Tools Behind South Korean Bank Breaches

A hacker's own mistake has given researchers a rare look at how AI tools were used to break into South…

14 hours ago

Hackers Hide Marsalek Malware in Fake Roblox and Fortnite Cheats to Steal Passwords and Crypto Wallet Data

Hackers are hiding a free information stealer called Marsalek inside fake cheats and tools for games such as Roblox, Fortnite,…

16 hours ago

One Hacker Uses 12 AI Agents to Breach Taiwan’s Emergency Services and Steal Sensitive Data

A single operator in Taiwan built a team of 12 AI agents and used it to attack hundreds of organizations…

18 hours ago

Hackers Trick Mac Users Into Running Terminal Commands That Install Phexia Password-Stealing Malware

A macOS malware family called Phexia is spreading through fake web pages that talk Mac users into pasting a command…

18 hours ago

Hackers Use Fake Government Websites and CAPTCHA Checks to Deliver SimpleHelp Remote Access Software

Hackers are impersonating the Israel Tax Authority through phishing emails, fake government websites, and CAPTCHA-style checks to trick employees into…

19 hours ago

Critical Citrix XenServer Vulnerability Could Let Hackers Take Over Virtualization Hosts Without Authentication

Citrix has disclosed a critical XenServer vulnerability that could let an unauthenticated attacker compromise virtualization hosts and supporting appliances. Tracked…

20 hours ago

Gorbag Hackers Exploit WinRAR Vulnerability to Steal Credentials From Ukrainian Government Agencies

Russia-aligned hackers tracked as Gorbag are exploiting a WinRAR vulnerability to steal browser credentials, VPN configurations, and sensitive documents from…

2 days ago

Scammers Use Microsoft Azure to Host Fake Windows Security Alerts Seen at 80 Organizations

Scammers are abusing Microsoft Azure to host fake Windows security alerts that pressure users into calling fraudulent support numbers. Between…

2 days ago