A cleverly crafted fake Zoom website has silently pushed surveillance software onto Windows machines, infecting 1,437 users globally in just 12 days. The campaign, first detected on February 11, 2026, …
1Campaign Platform Helps Attackers Bypass Google Ads Screening to Show Malicious Ads
A newly uncovered cloaking platform called 1Campaign is giving cybercriminals a powerful tool to push malicious advertisements through Google’s ad review system, putting everyday users at serious risk of phishing scams and …
ResidentBat Android Malware Provides Belarusian KGB with Persistent Access to Mobile Devices
A newly documented Android spyware called ResidentBat has been linked to the Belarusian KGB, giving state operators deep and persistent access to the mobile devices of journalists and civil society members. First …
New $300 Android RAT With Automated Permission Bypass and Hidden Remote Control
A newly discovered Android Remote Access Trojan (RAT) named Oblivion is raising serious concerns across the mobile security community. Sold on a public hacking forum for as little as $300 …
Critical ServiceNow AI Platform Vulnerability Enables Remote Code Execution
ServiceNow AI Platform Vulnerability A critical vulnerability in an enterprise AI platform has been patched, addressing a flaw that could allow unauthenticated remote code execution. Tracked as CVE-2026-0542, this security …
New Claude Code Enables Remote Control of Your Terminal Session From Your Phone
Claude Code Remote Control From Phone Anthropic has launched a new “Remote Control” feature for its agentic terminal tool, Claude Code. His capability allows developers to start tasks in their …
Steaelite RAT Fuels New Wave of Double Extortion Threats Targeting Enterprises
A newly emerged remote access trojan (RAT) called Steaelite is raising serious concerns across enterprise security teams. First spotted on underground cybercrime networks in November 2025, this malware merges two …
OpenAI Confirms that Chinese Hackers Used ChatGPT to Launch Cyberattacks
OpenAI has officially confirmed that a ChatGPT account linked to an individual associated with Chinese law enforcement was used to plan and document large-scale covert cyberattack campaigns. The revelation, published …
Firefox 148 Released With Sanitizer API to Disable XSS Attack
Firefox 148 Released With Sanitizer API Firefox 148 introduces the new standardized Sanitizer API, becoming the first browser to implement it. The update marks a major step forward for web …
Critical Claude Code Vulnerabilities Enables Remote Code Execution Attacks
Claude Code Vulnerabilities A critical security flaw in Anthropic’s Claude Code demonstrates how threat actors can exploit repository configuration files to execute malicious code and steal sensitive API keys. The …