Forwarded from Android Security & Malware
Exposes and Analyzes of ERMAC V3.0 Banking Trojan Full Source Code Leak
https://hunt.io/blog/ermac-v3-banking-trojan-source-code-leak
https://hunt.io/blog/ermac-v3-banking-trojan-source-code-leak
hunt.io
ERMAC V3.0 Banking Trojan: Full Source Code Leak and Infrastructure Analysis
Hunt.io uncovers the complete ERMAC V3.0 source code, revealing its infrastructure, vulnerabilities, and expanded form injection capabilities.
Forwarded from The Hacker News
🚨 New supply-chain attacks hit open-source repos.
• PyPI: termncolor & colorinal delivered multi-stage malware with Windows & Linux backdoors.
• npm: fake packages posed as dev tools & job tests, stealing iCloud Keychain, browser data, wallets.
Details → https://thehackernews.com/2025/08/malicious-pypi-and-npm-packages.html
• PyPI: termncolor & colorinal delivered multi-stage malware with Windows & Linux backdoors.
• npm: fake packages posed as dev tools & job tests, stealing iCloud Keychain, browser data, wallets.
Details → https://thehackernews.com/2025/08/malicious-pypi-and-npm-packages.html
Forwarded from The Hacker News
🚨 Compliance isn’t optional. Fail GDPR, HIPAA, or PCI DSS → massive fines, lawsuits, even shutdowns.
The scary part? Most don’t even know where they’re failing.
Here’s how Wazuh helps fix it:
✅ Real-time alerts
✅ Compliance dashboards
✅ Active response
Read this now → https://thehackernews.com/2025/08/wazuh-for-regulatory-compliance.html
The scary part? Most don’t even know where they’re failing.
Here’s how Wazuh helps fix it:
✅ Real-time alerts
✅ Compliance dashboards
✅ Active response
Read this now → https://thehackernews.com/2025/08/wazuh-for-regulatory-compliance.html
Forwarded from The Hacker News
46% of security leaders lose sleep over growing regulatory complexity.
Move beyond checkbox compliance and turn GRC into a strategic advantage with this new Tines guide.
What's in the guide:
🔸 Common challenges for security and compliance teams today
🔸 Four areas where GRC teams can leverage workflow orchestration and automation for immediate impact
🔸 Case study stories from Druva, Path AI, and more
Get the full guide here: https://thn.news/automating-grc-guide
Move beyond checkbox compliance and turn GRC into a strategic advantage with this new Tines guide.
What's in the guide:
🔸 Common challenges for security and compliance teams today
🔸 Four areas where GRC teams can leverage workflow orchestration and automation for immediate impact
🔸 Case study stories from Druva, Path AI, and more
Get the full guide here: https://thn.news/automating-grc-guide
Forwarded from cKure
■■□□□ 🧊 Hidden Firefox AI process consuming CPU resources?
Firefox browser users have encountered serious performance issues after the release of version 141. Initially, suspicion fell on the new "Smart Tab Grouping" feature using AI, but an official Mozilla investigation (Bug 1982278) showed that the abnormally high CPU load is caused by another component, namely the hidden pilot experiment "Semantic Search in History" (places.semanticHistory). The "Smart Tab Grouping" has nothing to do with this.
Everything was fine just yesterday. Today I opened Firefox, and as a result, there were sharp spikes in CPU load and power consumption. My fans shouldn't be this loud if I don't have more than 15 tabs open.
After unsuccessfully restarting Firefox, I opened the task manager and found that a process called "Inference" fluctuates from 0.05% to 130% CPU usage, which explains the spikes in CPU load and power consumption.
Killing the process solves the fluctuation problem but causes Firefox to crash, requiring a restart.
What is going on? This problem never existed until today.
— users complain on Reddit.
😱 Official Mozilla representatives have acknowledged the issue. The fix will be included in Firefox 143 (ctodea writes Target Milestone: → 143 Branch).
💡For full control and disabling of all local AI services, advanced users should experiment with some settings:
In about:config the parameter browser.ml.enable is set to false.
*The browser.ml.enable parameter is the main, kind of master key to all under-the-hood machine learning in Firefox. Setting this value to false completely deactivates the local AI engine (Inference process), making it impossible for any dependent features to work, including smart tab groups and the chatbot.
In about:config the parameter browser.tabs.groups.smart.enabled is set to false.
*Disables only the smart tab grouping feature. This step is not a guaranteed solution to the CPU overload problem, as the main source of the error lies in another component. Meanwhile, the AI engine itself (Inference process) remains active for other potential tasks.
In about:config the parameter browser.ml.chat.enabled is set to false.
*The browser.ml.chat.enabled parameter is a direct system switch that controls the activation and visibility of the AI chat integrated into Firefox.
Source: Telegram | Russian OSINTPlease open Telegram to view this post
VIEW IN TELEGRAM
Forwarded from cKure
■■■□□ This Spyware Campaign Is Targeting Android Users Via Messaging Apps.
https://lifehacker.com/tech/this-spyware-campaign-is-targeting-android-users-via-messaging-apps
https://lifehacker.com/tech/this-spyware-campaign-is-targeting-android-users-via-messaging-apps
Lifehacker
This Spyware Campaign Is Targeting Android Users Via Messaging Apps
A new spyware campaign, referred to as LunaSpy, is targeting Android users by posing as antivirus delivered via messenger apps. Once installed on your device, it does everything from recording your screen to stealing your passwords.
Forwarded from cKure
■■■■□ Sniffing 5G With Software-Defined Radio.
https://hackaday.com/2025/08/18/sniffing-5g-with-software-defined-radio/
https://hackaday.com/2025/08/18/sniffing-5g-with-software-defined-radio/
Hackaday
Sniffing 5G With Software-Defined Radio
The fifth generation mobile communications protocol (5G) is perhaps the most complicated wireless protocol ever made. Featuring wildly fast download speeds, beam forming base stations, and of cours…
Forwarded from Gizchina.com
Fast charging wars are getting out of hand and no one asked for it https://www.gizchina.com/news/fast-charging-wars-are-getting-out-of-hand-and-no-one-asked-for-it
Forwarded from Hacker News
fmiop-v4.1.1_2053-beta.zip
8.4 MB
LMKD-PSI Activator - (LMKD-PSI stands for Low Memory Killer Daemon - Pressure Stall Information)
A Magisk / KSU module to supercharge RAM management by activating PSI mode in LMKD, offering a faster, more stable, and more efficient alternative to outdated minfree_levels-based memory management
A Magisk / KSU module to supercharge RAM management by activating PSI mode in LMKD, offering a faster, more stable, and more efficient alternative to outdated minfree_levels-based memory management