Security
Millions of Android users tricked into paying for fake call logs
App creators will offer basically anything these days, even if most claims appear too good to be true. Unfortunately, an army of Android users took the bait, paying for apps that sold access to call histories for any phone number. Over 7 million downloads later, it’s now official – it was all fake.
Read more about Millions of Android users tricked into paying for fake call logs
AI investment fraudsters spawn 15,500 scam sites abusing legitimate marketing tool
A massive investment scam campaign involves thousands of websites and a common trait: fraudsters abuse a legitimate advertising performance tracking tool to profile victims, direct them to targeted scams, while showing benign content to security researchers and tools.
Read more about AI investment fraudsters spawn 15,500 scam sites abusing legitimate marketing tool
ShinyHunters leaks Cushman & Wakefield Salesforce dataset after failed negotiations
ShinyHunters has leaked a massive Salesforce-linked dataset allegedly tied to commercial real estate giant Cushman & Wakefield – claiming ransom negotiations with the company have failed.
Read more about ShinyHunters leaks Cushman & Wakefield Salesforce dataset after failed negotiations
Trellix hackers may have accessed far more than source code, researchers warn
Cybersecurity giant Trellix has been breached, with a ransomware gang leaking screenshots of its internal infrastructure. Researchers say the attackers may have accessed critical VMware, Rubrik, and Dell EMC systems, raising fears that the incident goes far beyond source code exposure.
Read more about Trellix hackers may have accessed far more than source code, researchers warn
Amazon cloud outage disrupts Coinbase and CME trading systems at North Virginia data centre
Amazon's cloud unit reported an outage at one of its data center zones in northern Virginia on Thursday, while derivatives marketplace CME Group and cryptocurrency exchange Coinbase said there were issues with their trading platforms.
Read more about Amazon cloud outage disrupts Coinbase and CME trading systems at North Virginia data centre
Two critical Linux kernel exploits dropped with no patches available
Unprivileged users on a Linux system can gain root privileges in seconds using two recently disclosed critical kernel exploits, with no patches available. The multiplying kernel exploits put most cloud infrastructure at risk. Until patches arrive, security researchers warn users to be extra careful when installing new software or updating packages.
Read more about Two critical Linux kernel exploits dropped with no patches available
What ceasefire? Iranian hacking group Handala leaks data of thousands of US Marines
Stryker devices wiped, the email of the FBI boss Kash Patel breached, and now, personal details of thousands of US Marines leaked. The Iranian hacking group Handala clearly doesn’t care about any ceasefire between the US and Iran, as fragile as the agreement is.
Read more about What ceasefire? Iranian hacking group Handala leaks data of thousands of US Marines
Anthropic releases fix for severe Claude Chrome extension flaw – researcher hacks patch in 3 hours
Anthropic has released only a partial fix for a flaw in Claude Code's Chrome extension – allowing any browser extension to hijack the AI assistant and act as the user – and researchers say they hacked the patch in just 3 hours.
Read more about Anthropic releases fix for severe Claude Chrome extension flaw – researcher hacks patch in 3 hours
Critical PAN-OS zero-day vulnerability exploited in the wild, with no patches available
Palo Alto Networks warns that its widely deployed firewalls are under attack with hackers exploiting a critical zero-day vulnerability. Unauthenticated attackers can achieve remote code execution with root privileges, and no patches are yet available.
Read more about Critical PAN-OS zero-day vulnerability exploited in the wild, with no patches available
Hogwarts for Russian hackers: where GRU turns students into state-sponsored threat actors
Documents obtained by investigative journalists describe how the GRU, Russia’s military intelligence agency, is training students in hacking attacks and disinformation tactics at Bauman Moscow State Technical University. Yep, that’s where Sandworm and Fancy Bear get fresh talent from.
Read more about Hogwarts for Russian hackers: where GRU turns students into state-sponsored threat actors
Hackers claim 500K Coinbase France users exposed as researchers warn leak offers phsihing campaign "starter pack"
A threat actor is advertising what they claim to be a dataset of 500,000 French crypto users, stolen from Coinbase.
Read more about Hackers claim 500K Coinbase France users exposed as researchers warn leak offers phsihing campaign "starter pack"
Harvard, Oxford, and MIT named as hackers drop full Canvas breach victim list
Hackers have published a massive list naming Harvard, Oxford, and MIT among thousands of educational institutions allegedly caught in the expanding Canvas data breach.
Read more about Harvard, Oxford, and MIT named as hackers drop full Canvas breach victim list
Critical vulnerability affects Ollama: 300,000 servers exposed to attackers
Ollama accepts requests without authentication, and 300,000 servers are sitting ducks. A new critical vulnerability allows hackers to leak server memory storing API keys, environment variables, system prompts, and users’ conversation data.
Read more about Critical vulnerability affects Ollama: 300,000 servers exposed to attackers
Trump admin’s about-face on AI safety alarms US techies but is a win for national security
With Donald Trump, you can never be sure he won’t change his mind – or be talked into doing so – in basically a minute. Still, the White House’s apparent shift in AI policy approach is causing waves in the tech industry.
Read more about Trump admin’s about-face on AI safety alarms US techies but is a win for national security
US Army contractor leaks military base photos, personnel information for over a year
A US government contractor providing facility management solutions to the US Army leaked sensitive information from military installations.
Read more about US Army contractor leaks military base photos, personnel information for over a year
Google urges Android users to update their phones to combat takeover flaw
Google is urging Android users to update now after discovering a critical flaw that could allow attackers to compromise their devices without needing extra permissions or user interaction.
Read more about Google urges Android users to update their phones to combat takeover flaw
China-linked APT group attacking government entities in South America and Europe
A sophisticated China-linked advanced persistent threat (APT) group has been targeting government entities in South America since at least late 2024 and in Southeastern Europe since 2025, according to researchers.
Read more about China-linked APT group attacking government entities in South America and Europe
Germany’s .de domains just disappeared from the internet due to DNS outage
Millions of German websites went dark, and apps stopped working on Tuesday night as Germany’s top-level domain (TLD) .de became unreachable.
Read more about Germany’s .de domains just disappeared from the internet due to DNS outage
Guy finds Google Chrome is quietly installing a 4GB AI model on our devices
Google Chrome is silently installing a 4GB AI model on each of our devices without consent, says Alexander Hanff, a prominent computer scientist and lawyer. According to him, that’s both illegal and extremely costly for the climate.
Read more about Guy finds Google Chrome is quietly installing a 4GB AI model on our devices
Microsoft Edge writes passwords to memory in cleartext: a gift for attackers
Microsoft Edge “by design” decrypts and loads all saved user passwords into memory, where they remain in cleartext throughout the session. This makes credential harvesting easier for attackers, a security researcher warns. However, if a hacker is in a position to read from your memory, the user already has big problems.
Read more about Microsoft Edge writes passwords to memory in cleartext: a gift for attackers
