UPDATED
Slashdot · · Medium severity
Amazon says it is ending sideloading on new Fire Sticks because "apps that facilitate piracy, and other apps, can carry malware," adding that there is "a good amount of evidence" that sideloaded apps may contain unwanted code or...
Ars Technica · · Medium severity
Amazon is blaming the threat of malware for its decision to stop releasing new Fire Sticks that support sideloading apps from outside Amazon’s Appstore. Amazon has released two Fire Stick models that use its proprietary, Linux-based...
The Hacker News · · Medium severity
A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured servers, then stitching them into a network built to knock websites and online services offline. Researchers at...
Infosecurity Magazine · · Medium severity
Attackers exploited a critical SimpleHelp RMM bug to deploy TaskWeaver and Djinn Stealer malware
TechRadar · · Medium severity
Microsoft takes down over 100 malicious Edge extensions hiding malware in images and fonts
HackRead · · Medium severity
A fake FIFA World Cup 2026 T-shirt giveaway scam is spreading Voidrift malware through personalized emails using company logos and trusted websites to bypass security filters.
TechRepublic · · Medium severity
A SimpleHelp authentication flaw is being exploited to deploy Djinn Stealer, a cross-platform malware targeting cloud, developer, and AI credentials. The post SimpleHelp Flaw Exploited to Deploy Malware Targeting Windows, macOS, and...
Infosecurity Magazine · · Medium severity
ReliaQuest report warns of a surge in ClickFix social engineering attacks against Windows and macOS users
Graham Cluley · · Medium severity
USB drives carrying China-linked malware infected Japanese military networks for nearly a year
SecurityWeek · · Medium severity
The threat actor is focused on collecting credentials, SSH keys, cryptocurrency wallets, and development tooling. The post Critical SimpleHelp Vulnerability Exploited for Malware Delivery appeared first on SecurityWeek .
TechRepublic ·
Have I Been Pwned added 124M stolen passwords. Discover how this infostealer data impacts New Zealand users and the essential steps to protect your online accounts. The post New Infostealer Data Raises Fresh Risks for New Zealand...
TechRepublic · · Medium severity
SentinelOne says macOS.Gaslight uses prompt injection to mislead AI-based malware analysis, steal data, and use Telegram for C2. The post North Korea-Linked macOS Malware Uses Prompt Injection to Evade AI Analysis appeared first on...
Malwarebytes Labs · · Medium severity
Microsoft has removed 119 extensions from the Edge add-on store which were all tied to one adware campaign. In a paper titled “ Inside StegoAd: How We Disrupted a Massive Malicious Extension Campaign ,” Microsoft researchers detail how...
The Hacker News · · Medium severity
This week was a reminder that attackers do not always need big tricks. One small mistake, one old access path, one missed patch, and suddenly the door is open. The noise is not all noise, either.
BleepingComputer · · Critical severity
Hackers are exploiting a recently disclosed critical vulnerability (CVE-2026-48558) in SimpleHelp to deploy Djinn Stealer, a previously undocumented cross-platform information stealer targeting Windows, macOS, and Linux.
The Hacker News · · Medium severity
A Russian advanced persistent threat (APT) group has continued to evolve and expand its malware arsenal as part of its ongoing cyber onslaught against Ukraine throughout 2025. Slovakian cybersecurity company ESET said it observed 35...
The Hacker News · · Medium severity
Microsoft has shut down a long-running malicious extension operation on the Edge Add-ons store that hid its payloads inside ordinary image and font files, then woke up days after install to steal credentials and run ad fraud. The...
The Hacker News · · Low severity
Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS hosts. "This attack avoids the most...
Tech-Economic Times · · Medium severity
The Indian Computer Emergency Response Team has warned WhatsApp web and desktop users to be cautious of any attachments, even if they come from a friend, colleague or family member.
TechRadar · · Medium severity
Efosa has been writing about technology for over 7 years, initially driven by curiosity but now fueled by a strong passion for the field. He holds both a Master's and a PhD in sciences, which provided him with a solid foundation in...
Latest InfoTech News, IT, Information Technology News | The HinduBusinessLine · · Medium severity
The national nodal agency for cybersecurity advises not to open unexpected attachments from anyone including friends, colleagues or family members
BleepingComputer · · Medium severity
An agentic coding tool tasked with running a seemingly benign GitHub repository could execute a malicious payload that is invisible to both security agents and human reviewers.
The Hacker News · · Medium severity
A newly discovered cyber attack campaign has been observed delivering a previously undocumented malware family called SharkLoader that acts as a loader for deploying Cobalt Strike Beacon on compromised hosts. Kaspersky, which is...
CSO Online Security · · Medium severity
Enterprises that have turned to AI in order to boost their security defenses may have to reconsider their approach. Malware containing code that commands LLM-assisted products to abort their analysis or refuse to implement it is already...
The Record by Recorded Future · · Medium severity
Threat intelligence researchers at Google described StockStay, the latest malware developed by the Russian cyber-espionage group known as Turla.
Malwarebytes Labs · · Medium severity
An email attachment leads to the installation of a malicious Chrome extension. Researchers say it is part of a Windows backdoor delivered via a phishing email. The malware abuses Chrome Native Messaging to move control from the browser...
TechRadar · · Medium severity
This macOS malware can avoid AI analysis with gaslighting prompts hidden inside its architecture
The Hacker News · · Critical severity
Cybersecurity researchers have flagged yet another evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and Hades malware family that has compromised a new set of npm packages, even as it has propagated to the Go...
Help Net Security · · Medium severity
Submitting a suspicious file to VirusTotal or MalwareBazaar places a copy of that file on a platform other people can search. Analysts across the industry rely on these services to get a quick verdict on whether a binary is dangerous....
AlienVault OTX ·
A previously undocumented Windows loader designated as OXLOADER delivers the CASTLESTEALER infostealer through malicious Google Ads campaigns, achieving remarkably low detection rates. The loader employs multiple obfuscation layers...
AlienVault OTX · · Medium severity
A sophisticated fraud campaign exploiting Indonesia's tax season targeted 67 million residents through fake Coretax applications distributed via phishing websites and WhatsApp social engineering. The GoldFactory threat cluster...
AlienVault OTX · · Medium severity
A newly identified threat group, designated as GhostShell, has been conducting cyber operations against Ukraine's unmanned aerial vehicle supply chain since February 2026. The attackers employ malicious archives containing decoy...
AlienVault OTX · · Medium severity
Infostealers remain among the most pervasive cybercrime threats, silently harvesting passwords, cookies, and session tokens that enable enterprise breaches. StealC is a malware-as-a-service infostealer written in C++ that collects...
AlienVault OTX · · High severity
An initial access broker linked to Payouts King ransomware is deploying Edgecution, a sophisticated malware utilizing a malicious Microsoft Edge browser extension. The attack begins through social engineering via Microsoft Teams,...
AlienVault OTX ·
A new macOS ClickFix campaign employs fake CAPTCHA pages to deceive users into executing malicious Terminal commands. The attack chain downloads and invisibly mounts a DMG file containing a self-signed information-stealer application...
Microsoft Security Blog · · Medium severity
In this article The role of infostealers: From credential theft to intrusion StealC: Infostealer for rent Amadey: Malware-as-a-service for delivery of infostealers Defending against StealC and Amadey intrusions Microsoft Defender...
HackRead · · Medium severity
GTA 6 scams are luring fans with fake early access, crypto payments and malware downloads. Learn why PC and Android gamers face the biggest risks online today.
BleepingComputer · · Medium severity
A newly discovered macOS malware dubbed "Gaslight" is designed to confuse AI-assisted malware analysis tools by hiding prompt injection strings and fake debugging data within the executable.
TechRadar · · Medium severity
Cybersecurity ensures data protection on internet. Data encryption, firewall, encrypted network, VPN, secure access and authentication defend against malware, hacking, cyber crime and digital threat
TechRepublic · · Medium severity
Europol and Microsoft disrupted malware infrastructure linked to 27 million stolen login credentials and 140,000 infected computers in a global cybercrime network. The post Europol, Microsoft Hit Malware Network Behind 27M Stolen...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free