Mac Malware Checks Your GPU Before Showing Its Lure
The crews behind a long-running macOS scam have started doing something defenders usually do: vetting who is on the other end of a connection before …
Latest Posts
Researchers Chain WordPress RCE to Fileless Linux Root
Security researchers have shown that the critical wp2shell WordPress flaw doesn't have to stop at a web shell — it can be chained all the way to…
Blogger's Malware Glitch: Don't Touch Your Template
If your Blogger blog was locked for "Malware and Similar Malicious Content" and has since come back, read this before you touch anything: d…
Gmail to End "Send As" for Outlook and Yahoo Addresses
Google has put a date on the retirement of one of Gmail's oldest power-user features. Starting January 2027, the "Send as" option that …
Human Reviewer Caught AI Agent's Malware Pull Request
The thing that stopped an AI agent from poisoning a public open-source project last month wasn't a firewall, a classifier, or a sandbox. It was o…
Phishers Abuse Service Workers to Hijack Microsoft Logins
A phishing campaign documented by Kaspersky turns an ordinary browser feature into a credential-stealing proxy, letting attackers walk away with Micr…
Cloudflare Gives AI Agents a Wallet and a Spending Cap
Cloudflare has started handing out wallet handles to its customers, and the pitch sounds like a convenience feature: let your AI agent buy the API it…
cPanel Bug Hands Database Root to Any Hosting Customer
For three months, the cPanel security story has been about attackers forcing the front door. The vendor's newest release flips that script: this …
npm Worm Hits keyv and cacheable, Spreads to 400 Packages
A self-propagating worm tore through the npm registry on Tuesday morning, trojanizing the widely used keyv and cacheable caching libraries and spre…
GitHub Source Code Allegedly Up for Sale Again
The internal source code stolen from GitHub in May is allegedly back on the market, and this time the seller is showing samples to prove it. A listi…