CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

Rubrik Is A Cybersecurity Standout (Rating Upgrade)

Rubrik Is A Cybersecurity Standout (Rating Upgrade)

AI-Generated Browser Ransomware Abuses Chromium API on Windows, Linux, macOS, Android

Cybersecurity researchers have flagged a new malware artifact generated using DeepSeek that constructed a novel attack path combining unrealistic browser-malware concepts with a real browser capability to turn it into a working ransomware technique that runs entirely inside the browser on both Windows and Android devices. This is the first documented case where a frontier AI model

Gizmodo readers hit with ClickFix malware prompts after account compromise

Infosec buffs say Windows users could have been infected with a nasty trojan, while Mac users got off lightly

Iran-linked hackers used Israeli IT providers to target government bodies

Once installed, the tool can infiltrate programs used to access other computers. Malware disguised as legitimate updates sent by the IT provider can be sent to the customer.

Fine firms for data breaches, Hong Kong cybersecurity experts urge

Cybersecurity experts have called on authorities to impose fines on firms that suffer data breaches, after the personal information of more than 1 million people linked to a leading Hong Kong appliance distributor was maliciously encrypted. They made the comments on Friday, a day after the city’s privacy watchdog announced it had launched an investigation into the breach, which was initially reported by Shun Hing Group on March 23. The Office of the Privacy Commissioner for Personal Data said...

The best malware removal software of 2026: Expert tested and reviewed

Think your device is infected? Try out our favorite software to remove malware and restore your security.

FBI Addresses Report Claiming All Nancy Guthrie Ransom Notes Are Fake

An FBI spokesperson is shutting down a viral report claiming that three ransom notes pertaining to the disappearance of Savannah Guthrie’s missing mom, Nancy Guthrie, are fake. “The FBI and its task force partners have received several ransom notes over the course of this investigation. Some have been deemed to be extortion attempts without legitimacy,” []

North Korea-Linked macOS Malware Uses Prompt Injection to Evade AI Analysis

SentinelOne says macOS.Gaslight uses prompt injection to mislead AI-based malware analysis, steal data, and use Telegram for C2. The post North Korea-Linked macOS Malware Uses Prompt Injection to Evade AI Analysis appeared first on TechRepublic.

Klue hack results in data breach at several cybersecurity firms

Huntress, HackerOne, Jamf, Recorded Future, and Tanium are among the cybersecurity companies that had data stolen following an earlier breach at market research firm Klue.

Tata Electronics Cyber Breach Exposes Purported (NASDAQ: AAPL) Apple And (NASDAQ: TSLA) Tesla Trade Secrets

Tata Electronics confirmed it had detected a recent “cybersecurity incident” after ransomware group World Leaks posted more than 200,000 files on the dark web. The leaked files purportedly include component design and specification papers belonging to Apple Inc. (NASDAQ: AAPL) and Tesla Inc. (NASDAQ: TSLA), both customers of the Indian manufacturing group. “A few weeks [] The post Tata Electronics Cyber Breach Exposes Purported (NASDAQ: AAPL) Apple And (NASDAQ: TSLA) Tesla Trade Secrets appeared first on Foreign Policy Journal.

[webapps] Discuz! X5.0 - Authentication Bypass

Discuz! X5.0 - Authentication Bypass

A single config file in a cloned repository could steal your AWS credentials through Amazon Q Developer

A high-severity flaw in Amazon Q Developer allowed a malicious code repository to silently execute commands on a developer’s machine and steal their AWS credentials. Wiz Research discovered the vulnerability, tracked as CVE-2026-12957, and reported it to Amazon on April 20. Amazon patched the issue on May 12, and the disclosure went public today. The [] This story continues at The Next Web

$47M in Crypto Frozen in Global Infostealer Takedown: Europol

Police disrupted SocGholish, Amadey, and StealC, malware that harvests crypto wallets and passwords, freezing 41 million in crypto.

Apple’s ‘Hide My Email’ Feature May Reveal Users’ Real Addresses

The tech company has reportedly known about the privacy bug since last year.

SquidBleed Exposes 29-Year-Old Security Flaw: Millions of Proxy Users Could Face Credential and Token Leaks

A newly disclosed vulnerability dubbed SquidBleed has sent shockwaves through the cybersecurity community after researchers revealed that the flaw has existed inside the widely used Squid Proxy software since 1997. Tracked as CVE-2026-47729, the bug can allow attackers to access fragments of sensitive data belonging to other users sharing the same proxy infrastructure, including authentication credentials, API keys, session cookies, and private HTTP requests. Security researchers compare the issue to the infamous Heartbleed vulnerability because it enables unintended memory disclosure from a running service. Unlike traditional exploits that focus on code execution, SquidBleed exposes information that should never leave memory,

What to Know About This $3.1 Million Check Point Software Insider Sale After Shares Fell 40%

This cybersecurity leader, known for its global threat prevention platforms, reported significant insider selling in its latest SEC filing.

Another Company Identified in Latvijas valsts meži Cyberattack Investigation

The cybercriminal responsible for the attack on Latvijas valsts meži (LVM) also compromised a server belonging to pharmaceutical manufacturer Olpha, Latvia’s national cybersecurity incident response institution Cert.lv informed the LETA news agency. According to Cert.lv, investigators discovered the breach of Olpha’s server while analysing the cyberattack against Latvijas valsts meži. The institution stressed that the [] The post Another Company Identified in Latvijas valsts meži Cyberattack Investigation appeared first on Baltic News Network.

Crypto exchange BitMEX removes CEO, CFO and head of growth

Crypto exchange BitMEX removes CEO, CFO and head of growth