ShadyPanda browser extensions amass 4.3M installs in malicious campaign.

Coupang Data Breach Affects All 33.7 Million South Korean Accounts.

SmartTube YouTube app for Android TV breached to push malicious update.

Stealthy browser extensions waited years before infecting 4.3M Chrome, Edge users with backdoors and spyware.

Glassworm malware returns in third wave of malicious VS Code packages.

New Albiriox MaaS Malware Targets 400+ Apps for On-Device Fraud and Screen Control.

Google and Apple ordered to stop fake government TXTs.

Swiss government says give M365, and all SaaS, a miss as it lacks end-to-end encryption.

About 1 in 10 software flaws were exploited in 2024.

Hackers are attacking Israeli networks with a new tool called MuddyViper.

The group MuddyWater used fake emails and VPN bugs to break into systems in tech, transport, and utilities.

MuddyViper can steal passwords, browser data, and control infected computers — while pretending to be the Snake game.

Google just fixed 107 security flaws in Android — including two that hackers already used in real attacks.

The exploited bugs (CVE-2025-48633 & CVE-2025-48572) affect the Android Framework and could expose data or give attackers higher access.

ShadyPanda quietly turned trusted Chrome and Edge extensions into spyware.

Over 4.3 million installs in 7 years — some were even once verified by Google.

After silent updates in mid-2024, they began sending users’ browsing data and cookies to remote servers.

Tomiris is back — and harder to spot.

Kaspersky reports the group is using Telegram & Discord as C2 servers to hide attacks on government networks in Russia & Central Asia.

Its new malware — written in Python, Rust, Go, PowerShell & C#.

Security is an illusion.

“Sleeper” browser extensions woke up as spyware on 4 million devices.

Microsoft Defender portal outage disrupts threat hunting alerts.

MuddyWater strikes Israel with advanced MuddyViper malware.

GlassWorm Returns with 24 Malicious Extensions Impersonating Popular Developer Tools.

Researchers Capture Lazarus APT's Remote-Worker Scheme Live on Camera.

University of Pennsylvania confirms new data breach after Oracle hack.

University of Pennsylvania joins list of victims from Clop's Oracle EBS raid.