Posted by Aden Haussmann, Associate Product Manager and Sumeet Sharma, Play Partnerships Trust & Safety Lead
Android uses the best of Google AI and our advanced security expertise to tackle mobile scams from every angle. Over the last few years, we’ve launched industry-leading features to dete...
Ghostscript could be made to crash if it wrote certain files.
Microsoft has silently "mitigated"Â a high-severity Windows LNK vulnerability exploited by multiple state-backed and cybercrime hacking groups in zero-day attacks. [...]
A fresh wave of spear-phishing linked to the Russia-based Star Blizzard group has been detected by Sekoia
The cameras, made by the police technology juggernaut Axon Enterprise, were deployed on a trial basis by as many as 50 officers on Wednesday, according to local news reports.
Some 2FA-phishing attacks are becoming significantly harder to spot as threat actors blend two previously distinct phishing-as-a-service (PhaaS) kits: Salty2FA and Tycoon2FA, into a single hybrid strain.
Researchers at Any.Run warn that the hybrid is already bypassing detec...
A new cyber defense service has prevented almost one billion early-stage cyber-attacks in the past year, British Security Minister claims
Salt Security announced it is extending its API behavioral threat protection to detect and block malicious intent targeting Model Context Protocol (MCP) servers deployed within the AWS ecosystem. Building on the recent launch of Salt’s MCP Finder technology, Salt now enables organizations to identif...
Earlier this year, one of the largest crypto exchanges in South Korea detected abnormal withdrawal activity from one of its…
The post $35 Million in Crypto Drained in 15 Minutes: How Exchange Hacks Are Evolving and How to Prevent Them appeared first on Chainalysis.
Attackers are using a tool called Evilginx to steal session cookies, letting them bypass the need for a multi-factor authentication (MFA) token.
Personal Information of 33.7 Million Stolen From Coupang South Korea’s Coupang disclosed a five‑month data breach in which attackers accessed names, addresses, email addresses, phone numbers, and order history for about 33.7 million customers. The breach began in late June and was only detected in m...
Mobile phone makers will no longer be required to load the Indian government's Sanchar Saathi app onto new devices after the initial announcement prompted pushback from companies and privacy groups.
Oxygen Forensic® Detective v18.1 is now out, bringing new extraction options, artifact support, and a dedicated cryptocurrency section.
The FBI has recently issued a public service announcement that warns that since January 2025 there have been more than 5,100 complaints of account takeover fraud, and total reported losses in excess of US $262 million.
Read more in my article on the Fortra blog.
Bitwarden announced Bitwarden Access Intelligence for Enterprise plans. Access Intelligence provides visibility into weak, reused, or exposed credentials across critical applications, with guided remediation workflows for consistent credential updates at scale. The capability helps IT and security t...
Several security issues were fixed in PostgreSQL.
The threat actor known as Water Saci is actively evolving its tactics, switching to a sophisticated, highly layered infection chain that uses HTML Application (HTA) files and PDFs to propagate a worm that deploys a banking trojan via WhatsApp in attacks targeting users in Brazil.
The latest wave is...
A critical vulnerability in Yearn Finance's yETH pool allowed an attacker to steal around $9m
Poetry can be a perplexing art form for humans to decipher at times, and apparently AI is being tripped up by it too.
Researchers from Icaro Lab (part of the ethical AI company DexAI), Sapienza University of Rome, and Sant’Anna School of Advanced Studies have found that, wh...
DragonForce expanded its ransomware operation in 2025 by working with English-speaking hackers known for advanced social engineering and initial access. Acronis explains how the "Scattered Spider" collaboration enables coordinated, multistage intrusions across major environments. [...]