UPDATED
AppleInsider · · Medium severity
There have been some incidents involving a Mac telling a user that the ChatGPT app is malware and moving it to the trash. Overall, ChatGPT isn't malware, and there's a very easy fix. It's too late to just update ChatGPT, you now have to...
SecurityWeek · · Medium severity
Campaign uses fake OnlyFans account downloads to infect Windows and macOS systems with multi-function malware. The post Free OnlyFans Lure Used to Spread Cross-Platform CRPx0 Malware appeared first on SecurityWeek .
TechRadar · · Medium severity
Superimposed on top of it is a pink triangle with exclamation mark inside it. Behind it is a computer display with code on it
BleepingComputer · · Medium severity
Checkmarx warned over the weekend that a rogue version of its Jenkins Application Security Testing (AST) plugin had been published on the Jenkins Marketplace.
Infosecurity Magazine · · Medium severity
ThreatFabric finds new TrickMo Android banking trojan variant routing C2 through The Open Network
TechRadar · · Medium severity
A robot standing thoughtfully in front of a giant digital display with code on it
TechRadar · · Medium severity
Hacker with malware code in computer screen. Cybersecurity, privacy or cyber attack. Programmer or fraud criminal writing virus software.
Ghacks Technology News · · Medium severity
Attackers are currently running a malvertising campaign that uses Google Ads and legitimate shared chats on Claude.ai to spread macOS infostealer malware. The campaign was identified by Berk Albayrak, a security engineer at Trendyol...
BleepingComputer · · Medium severity
Attackers are abusing Google Ads and legitimate Claude.ai shared chats in an active malvertising campaign. Users searching for "Claude mac download" may come across sponsored search results that list claude.ai as the target website, but...
HackRead · · Medium severity
DigiCert revokes 60 code signing certificates after hackers used a malicious support chat attachment to sign the Zhong Stealer malware.
HackRead · · Medium severity
JDownloader confirms a security breach where hackers manipulated official download links to distribute malicious files between 6 and 7 May 2026.
Mandiant Blog · · Medium severity
Written by: Mark Magee, Jose Hernandez, Bavi Sadayappan, Jessa Valdez Since late 2023, Mandiant Threat Defense and Google Threat Intelligence Group (GTIG) have tracked UNC5142, a financially motivated threat actor that abuses the...
Mandiant Blog · · Critical severity
Written by: Blas Kojusner, Robert Wallace, Joseph Dobson Google Threat Intelligence Group (GTIG) has observed the North Korea (DPRK) threat actor UNC5342 using ‘EtherHiding’ to deliver malware and facilitate cryptocurrency theft, the...
Mandiant Blog · · Medium severity
Written by: Wesley Shields Introduction COLDRIVER, a Russian state-sponsored threat group known for targeting high profile individuals in NGOs, policy advisors and dissidents, swiftly shifted operations after the May 2025 public...
Mandiant Blog · · Medium severity
Google Threat Intelligence Group (GTIG) is tracking a cluster of financially motivated threat actors operating from Vietnam that leverages fake job postings on legitimate platforms to target individuals in the digital advertising and...
BleepingComputer · · Medium severity
The website for the popular JDownloader download manager was compromised earlier this week to distribute malicious Windows and Linux installers, with the Windows payload found deploying a Python-based remote access trojan.
BleepingComputer · · Medium severity
A malicious Hugging Face repository that reached the platform's trending list impersonated OpenAI's "Privacy Filter" project to deliver information-stealing malware to Windows users.
The Hacker News · · Medium severity
Threat hunters have flagged a previously undocumented Brazilian banking trojan dubbed TCLBANKER that's capable of targeting 59 banking, fintech, and cryptocurrency platforms. The activity is being tracked by Elastic Security Labs under...
The Register · · Medium severity
There’s a mysterious framework worming its way through exposed cloud instances removing all traces of TeamPCP infections, but it’s not benevolent by a long shot: Whoever is behind this bit of malware may be cleaning up who came before,...
TechRadar · · Medium severity
TNW · · Medium severity
The two most important software supply chains in artificial intelligence have been systematically compromised. Hugging Face, the repository that hosts more than a million machine learning models used by virtually every AI company on the...
IT Pro · · Medium severity
Red warning symbol imposed over computer code denoting a data security compromise.
BleepingComputer · · Medium severity
A new trojan named TCLBanker, which targets 59 banking, fintech, and cryptocurrency platforms, uses a trojanized MSI installer for Logitech AI Prompt Builder to infect systems.
HackRead · · Medium severity
Researchers have discovered a new malvertising campaign using a fake Claude AI website to plant a new, undocumented backdoor named Beagle on user devices.
BleepingComputer · · Medium severity
The Australian Cyber Security Center (ACSC) is warning organizations of an ongoing malware campaign using the ClickFix social engineering technique to distribute the Vidar Stealer info-stealing malware.
TechRadar · · Medium severity
Malware attack virus alert , malicious software infection , cyber security awareness training to protect business
BleepingComputer · · Medium severity
A fake version for the Claude AI website offers a malicious Claude-Pro Relay download that pushes a previously undocumented backdoor for Windows named Beagle.
Infosecurity Magazine · · Medium severity
A China-linked threat actor backdoored a version of Daemon Tools to infect thousands
The Hacker News · · Medium severity
Cybersecurity researchers have discovered three packages on the Python Package Index (PyPI) repository that are designed to stealthily deliver a previously unknown malware family called ZiChatBot on Windows and Linux systems. "While...
TechRadar · · Medium severity
TechRadar · · Medium severity
The Hacker News · · Medium severity
Cybersecurity researchers have exposed a new Mirai-derived botnet that self-identifies as xlabs_v1 and targets internet-exposed devices running Android Debug Bridge (ADB) to enlist them in a network capable of carrying out distributed...
BleepingComputer · · Critical severity
Disc Soft Limited, the maker of DAEMON Tools Lite, confirmed that the software had been trojanized in a supply chain attack and released a new, malware-free version.
Infosecurity Magazine · · Medium severity
Cisco Talos uncovers CloudZ RAT and Pheno plugin abusing Microsoft Phone Link to intercept SMS OTPs
CSO Online Security · · Medium severity
Attackers have found a new way to turn Linux systems into stealthy supply chain distribution hubs that are resistant to takedowns. Researchers from Trend Micro have disclosed a new malware framework, dubbed Quasar Linux or QLNX,...
Android Authority · · Medium severity
TL;DR Attackers are spreading CloudZ RAT via a fake ScreenConnect update that quietly installs malware. The malware can steal browser credentials and even pull data from Microsoft Phone Link using a plugin, putting synced phone and PC...
The Record by Recorded Future · · Medium severity
Researchers at cybersecurity firm ESET attributed the campaign to APT37 and said the hackers used a backdoor attached to a suite of card games from a company called Sqgame.
BleepingComputer · · Medium severity
A previously undocumented Linux implant named Quasar Linux (QLNX) is targeting developers' systems with a mix of rootkit, backdoor, and credential-stealing capabilities.
BleepingComputer · · Medium severity
Hackers trojanized installers for the DAEMON Tools software and since April 8, delivered a backdoor to thousands of systems that downloaded the product from the official website.
The Hacker News · · Critical severity
A newly identified supply chain attack targeting DAEMON Tools software has compromised its installers to serve a malicious payload, according to findings from Kaspersky. "These installers are distributed from the legitimate website of...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free