Security researchers have uncovered a new social engineering campaign aimed at macOS users that delivers credential-stealing malware through a highly refined version of the ClickFix technique. The operation, dubbed “Matryoshka,” uses multiple layers of hidden code to slip past security…
Security researchers are warning of widespread exploitation targeting a severe remote code execution vulnerability in Ivanti Endpoint Manager Mobile (EPMM). The flaw, identified as CVE-2026-1281, allows attackers to take control of vulnerable systems without authentication and is already being used…
Cybercriminals are exploiting excitement around the Milano Cortina 2026 Winter Olympics by launching dozens of fraudulent online stores designed to steal shoppers’ money, payment details, and personal information. Security researchers warn that the campaign specifically targets fans searching for official…
A newly identified cyber espionage group has launched coordinated attacks against Ukrainian institutions using a previously undocumented malware strain known as CANFAIL, according to security researchers. The activity appears to focus on critical sectors tied to national security and infrastructure.…
Google has issued urgent security updates for its Chrome browser after confirming that a newly discovered vulnerability is already being used in real-world attacks. The flaw, identified as CVE-2026-2441, carries a high severity rating and could allow attackers to execute…
Cybersecurity researchers have uncovered a powerful new mobile spyware toolkit called ZeroDayRAT, now being sold through Telegram channels to cybercriminals worldwide. Unlike typical malware focused only on stealing data, this platform gives attackers full remote visibility into a victim’s phone,…
Rapid technological progress is transforming how societies function, from government services to everyday communication. But as countries digitize more of their infrastructure, new vulnerabilities emerge alongside the benefits. Lithuania, widely known for its advanced e-government systems, is now confronting that…
For years, ransomware encryption has been treated as the clearest warning sign of a cyberattack. Locked files, halted operations, public fallout. But new research suggests the industry may be focusing too much on visible damage while a more dangerous shift…
North Korean IT operatives are taking their remote work scams a step further. Instead of relying only on fake profiles, they are now submitting job applications using real LinkedIn accounts stolen or impersonated from legitimate professionals. According to the Security…
A new joint investigation from SentinelOne SentinelLABS and Censys is raising concerns about how open-source AI tools are being deployed around the world. Their findings show that AI hosting is quietly expanding into what they describe as a large, unmanaged…
