Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction.

Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk.

HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm.

Former Trump campaign manager secured $46.5 million Israeli contract to weaponize AI chatbots to reshape Gaza narrative.

A detailed investigation published by Drop Site News reveals that Brad Parscale, a longtime digital adviser and former presidential campaign manager for Donald Trump, alongside his corporate entity Clock Tower X, signed a lucrative $46.5 million contract with the Israeli government.

The sprawling initiative deploys networks of purpose built websites and digital material designed to feed search indexing tools and automated data scrapers, a tactic aimed at forcing artificial intelligence models like ChatGPT, Claude, and Gemini to generate favorable framing regarding the US–Israeli relationship and Tel Aviv's military actions.

FARA filings show that the campaign was funneled through public relations intermediaries like Havas Media, originally scaling up from smaller digital budgets to target younger demographics across social platforms and conservative media ecosystems.

Meta's smart glasses could be banned in Germany and the rest of the EU.

Attackers took over N-central servers.

N-able says they reached customer endpoints through Take Control and left Cloudflare tunnels for persistent access. The first fix missed an alternate exploit path.

Hugging Face Diffusers can run code it was told not to trust.

Three high-severity flaws let crafted model repositories bypass trust_remote_code during custom pipeline loading.

Attackers hijacked Adform’s shared tracking script to swap crypto wallet addresses in users’ browsers.

The code could rewrite addresses copied, pasted, or entered into forms while the page remained open.

A 41-minute sweep drained 1,196 Bitcoin addresses of 1,082.65 BTC, worth about $70 million.

Researchers linked the incident to a Coldcard firmware vulnerability that weakened wallet seed generation.

Galaxy Research says two more suspected sweep waves bring the total to 1,367.05 BTC across 4,585 addresses.

The activity appears ongoing, and the third wave may involve a different operator.

The Police National Legal Database (PNLD) has confirmed that police, government and customer contact information was compromised and published on the dark web.

The data included names, organisations and work email addresses belonging to police officers, police staff, criminal justice professionals, government partners and customers.

Italy fines telecom giant TIM $11 million for privacy violations.

N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete.

FBI agent arrested and charged with stealing $1,000,000 in crypto from a suspect's accounts.

Apple launches legal challenge against UK for demanding "back door" government access to encrypted user data.

BlackRock launches tokenized money-market fund on Ethereum.

Michael Saylor's 'Strategy' sold 1,637 Bitcoin worth $102 million.

Telegram was removed from the Apple App Store worldwide.

Added back to the Apple App Store.