North Korea–linked Kimsuky has been tied to a new Android malware campaign.
The group is spreading a fresh DocSwap variant through QR codes on fake CJ Logistics sites. Once installed, the app deploys a full RAT with access to messages, calls, files, audio, and camera.
The group is spreading a fresh DocSwap variant through QR codes on fake CJ Logistics sites. Once installed, the app deploys a full RAT with access to messages, calls, files, audio, and camera.
A critical ASUS Live Update vulnerability is now on CISA’s exploited list.
CVSS 9.3, supply chain–based, and tied to ShadowHammer, it embedded malicious code in signed updates for carefully chosen devices.
CVSS 9.3, supply chain–based, and tied to ShadowHammer, it embedded malicious code in signed updates for carefully chosen devices.
CVE-2025-20393 is rated 10.0, with no patch available.
Cisco confirmed active exploitation of an AsyncOS zero-day by a China-linked APT.
Cisco confirmed active exploitation of an AsyncOS zero-day by a China-linked APT.
The Syrian Immigrant's Son Who Shaped Silicon Valley
In the 1980s, as Apple's famous "1984" commercial declared war on a monolithic tech establishment, its co-founder Steve Jobs was becoming the face of American innovation. Few knew a pivotal detail of his origin story: Jobs was the biological son of a Syrian Muslim immigrant.
His father, Abdulfattah "John" Jandali, came to the U.S. from Syria in the 1950s for graduate studies. While Jobs was adopted and raised lovingly by Paul and Clara Jobs in California, his lineage connects one of America's most iconic capitalists to a heritage far from the halls of Silicon Valley.
This fact re-frames the classic American narrative. At the peak of Cold War & complex U.S. relations with the Middle East, the man defining the future of personal computing was, by birth, the son of an immigrant from that very region. It's a potent reminder that genius and legacy have no single passport, and that the threads of the American story are woven from unexpectedly diverse origins.
In the 1980s, as Apple's famous "1984" commercial declared war on a monolithic tech establishment, its co-founder Steve Jobs was becoming the face of American innovation. Few knew a pivotal detail of his origin story: Jobs was the biological son of a Syrian Muslim immigrant.
His father, Abdulfattah "John" Jandali, came to the U.S. from Syria in the 1950s for graduate studies. While Jobs was adopted and raised lovingly by Paul and Clara Jobs in California, his lineage connects one of America's most iconic capitalists to a heritage far from the halls of Silicon Valley.
This fact re-frames the classic American narrative. At the peak of Cold War & complex U.S. relations with the Middle East, the man defining the future of personal computing was, by birth, the son of an immigrant from that very region. It's a potent reminder that genius and legacy have no single passport, and that the threads of the American story are woven from unexpectedly diverse origins.
Cyber Dispatch™️
The Syrian Immigrant's Son Who Shaped Silicon Valley In the 1980s, as Apple's famous "1984" commercial declared war on a monolithic tech establishment, its co-founder Steve Jobs was becoming the face of American innovation. Few knew a pivotal detail of his…
Steve Jobs. Founder of Apple. Son of a Syrian Muslim immigrant. USA, 1980s.
The U.S. DOJ indicted 54 people over a nationwide ATM jackpotting scheme tied to the Venezuelan gang Tren de Aragua.
Prosecutors say the group used malware to force cash withdrawals and link 1,529 jackpotting incidents to the operation.
Prosecutors say the group used malware to force cash withdrawals and link 1,529 jackpotting incidents to the operation.
Bitsight TRACE found ~1,000 MCP servers exposed online with no authorization in place, revealing new AI-related security gaps.
These Model Context Protocol instances can expose tools, data, or even allow remote execution if reached by attackers, expanding the risk surface for AI systems built on MCP.
These Model Context Protocol instances can expose tools, data, or even allow remote execution if reached by attackers, expanding the risk surface for AI systems built on MCP.
A Russia-aligned threat group is abusing Microsoft’s device code login to hijack M365 accounts, targeting U.S. and European institutions.
Experts say attackers use compromised state emails and Cloudflare links to drive victims into legitimate Microsoft logins.
Experts say attackers use compromised state emails and Cloudflare links to drive victims into legitimate Microsoft logins.
Researchers uncovered a new malware campaign abusing cracked software sites to spread CountLoader.
The loader uses fake ZIP files and trusted Windows tools to stay hidden, then deploys ACR Stealer to steal sensitive data.
The loader uses fake ZIP files and trusted Windows tools to stay hidden, then deploys ACR Stealer to steal sensitive data.
Researchers uncovered GhostPairing, a social engineering attack that links a malicious device to a WhatsApp account by abusing the official pairing flow.
The attacker gets full linked-device access—messages, media, and groups—while the victim’s phone keeps working as normal.
The attacker gets full linked-device access—messages, media, and groups—while the victim’s phone keeps working as normal.
WatchGuard confirmed active exploitation of CVE-2025-14733 in Fireware OS.
The bug (CVSS 9.3) allows unauthenticated attackers to execute code via IKEv2 VPN paths. WatchGuard released patches and published indicators of compromise and attacker IPs.
The bug (CVSS 9.3) allows unauthenticated attackers to execute code via IKEv2 VPN paths. WatchGuard released patches and published indicators of compromise and attacker IPs.
Nigeria police arrested three suspects linked to global phishing. The main suspect is the alleged developer of the RaccoonO365 phishing-as-a-service kit.
Microsoft ties the tool to 5,000+ stolen credentials across 94 countries and to domain seizures in 2025, showing rising pressure on PhaaS operators.
Microsoft ties the tool to 5,000+ stolen credentials across 94 countries and to domain seizures in 2025, showing rising pressure on PhaaS operators.
CERT/CC disclosed a UEFI flaw affecting motherboards from ASRock, ASUS, GIGABYTE, and MSI.
The flaw allows early-boot DMA attacks, letting malicious PCIe devices read or modify memory before kernel security starts.
The flaw allows early-boot DMA attacks, letting malicious PCIe devices read or modify memory before kernel security starts.
Cracked Software and YouTube Videos Spread CountLoader and GachiLoader Malware
TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering
Internet Crime Complaint Center (IC3) | Senior U.S. Officials Continue to be Impersonated in Malicious Messaging Campaign
Proton is ready to leave Switzerland due to their new "Surveillance Law" which would break e2e encryption.
It has infrastructure ready in Germany & Norway, which they could fully migrate to protect customer privacy if needed.
It has infrastructure ready in Germany & Norway, which they could fully migrate to protect customer privacy if needed.