Microsoft has released patches to fix a total of 78 security vulnerabilities in its software products. These include five zero-day vulnerabilities that are being actively exploited in the wild. Out of the 78 vulnerabilities addressed, 11 are rated as Critical, …
29 Online Magento stores are currently facing a significant threat from malware attacks through backdoored extensions. Security researchers have identified several infected extensions on various e-commerce websites, which were compromised as a result of a supply-chain attack. Malicious Magento Extensions …
Backdoored Magento Extensions Impact Multiple Online Stores Read More »
î ‚May 12, 2025î „Ravie LakshmananMalware / Artificial Intelligence Threat actors have been observed leveraging fake artificial intelligence (AI)-powered tools as a lure to entice users into downloading an information stealer malware dubbed Noodlophile. “Instead of relying on traditional phishing or cracked …
Fake AI Tools Used to Spread Noodlophile Malware, Targeting 62,000+ via Facebook Lures Read More »
î ‚May 10, 2025î „Ravie LakshmananCryptocurrency / Cybercrime Germany’s Federal Criminal Police Office (aka Bundeskriminalamt or BKA) has seized the online infrastructure and shutdown linked to the eXch cryptocurrency exchange over allegations of money laundering and operating a criminal trading platform. The …
Germany Shuts Down eXch Over $1.9B Laundering, Seizes €34M in Crypto and 8TB of Data Read More »
î ‚May 10, 2025î „Ravie LakshmananBiometric Data / Privacy Google has agreed to pay the U.S. state of Texas nearly $1.4 billion to settle two lawsuits that accused the company of tracking users\’ personal location and maintaining their facial recognition data without …
î ‚May 09, 2025î „Ravie LakshmananArtificial Intelligence / Online Fraud Google recently announced the deployment of new artificial intelligence (AI) technology to combat online scams on Chrome, Search, and Android platforms. The company revealed that it will leverage Gemini Nano, an on-device …
Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android Read More »
The threat actor known as COLDRIVER , linked to Russia, has been found distributing a new malware named LOSTKEYS as part of an espionage-focused operation using ClickFix-style social engineering tactics. The Google Threat Intelligence Group (GTIG) stated that “LOSTKEYS is …
Russian Hackers Using ClickFix Fake CAPTCHA to Deploy New LOSTKEYS Malware Read More »
î ‚May 07, 2025î „Ravie LakshmananSoftware Supply Chain / Malware Cybersecurity researchers have uncovered a malicious package on the Python Package Index (PyPI) repository that poses as a harmless Discord-related utility but actually contains a remote access trojan. The package, known as …
Researchers Uncover Malware in Fake Discord PyPI Package Downloaded 11,500+ Times Read More »
î ‚May 06, 2025î „Ravie LakshmananVulnerability / Mobile Security Google has released its monthly security updates for Android with fixes for 46 security flaws, including one vulnerability that it said has been exploited in the wild. The vulnerability in question is CVE-2025-27363 …
Google Fixes Android Flaw (CVE-2025-27363) Exploited by Attackers Read More »
243 ASUS has recently addressed a vulnerability in routers that were equipped with AiCloud, which could potentially allow unauthorized commands to be executed on the device. It is essential for users to update their routers with the latest firmware release …
ASUS Fixed Critical Auth Bypass Vulnerability In AiCloud Routers Read More »
