Earlier in Cybersecurity
The sophisticated threat actor known as SideCopy has significantly broadened its operational focus within India, extending its spear-phishing campaigns to target academic institutions. This strategic expansion marks a notable shift from SideCopy's previously observed primary focus on government entities.
Malware already present on a user's Mac can exploit a hidden configuration setting within Meta's Muse AI assistant to redirect prompts to attackers, according to security researcher Patrick Wardle. Wardle demonstrated this vulnerability in a proof-of-concept released on September 21…
WordPress core has addressed a critical vulnerability, tracked as CVE-2026-93485 and nicknamed "Comment2Shell," which enabled anonymous users to achieve remote code execution (RCE) by exploiting administrator sessions. The flaw, fixed on September 17 in WordPress version 7.1.1, allowed an unauthenticated…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two significant vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, indicating that both flaws are currently being actively exploited by malicious actors.
Security researchers from LastPass and Delphos Labs have uncovered a sophisticated attack campaign utilizing a fake installer for the LastPass Authenticator application. This malicious software, discovered on GitHub, employs a Windows kernel driver that is digitally signed by Microsoft…
North Korean threat actors have executed the Contagious Interview campaign, successfully compromising at least 30,000 devices across more than 100 countries and exfiltrating approximately $10.71 million in cryptocurrency. This sophisticated operation primarily targeted individual web designers, engineers, and specialists…
This week's cybersecurity landscape was marked by a series of significant threats, including a critical zero-day vulnerability affecting Cisco devices, a remote code execution (RCE) flaw impacting AI agents, and widespread browser hijacking attacks.
Cybersecurity researchers have detailed a new malicious campaign identified as TASK#STOMP, which deploys a sophisticated PowerShell backdoor engineered to exfiltrate sensitive information from compromised computer systems. This backdoor operates with a broad mandate to automatically harvest and transmit various forms…
Graciela Gómez Hernández, a 30-year-old migrant from southern Mexico, died in the Otay Mountain Wilderness in Southern California on September 14, 2025, after crossing the U.S.-Mexico border. Her journey, undertaken with the hope of finding work to support her three…