Hackers use fake Ledger apps to steal Mac users’ seed phrases
SkyNet Automation Cybercriminal campaigns are using fake Ledger apps to target macOS users and their digital assets by deploying malware…
Security
Police arrests 270 dark web vendors, buyers in global crackdown
Police arrested 270 suspects following an international law enforcement action codenamed ‘Operation RapTor’ that targeted dark web vendors…
Ivanti EPMM flaw exploited by Chinese hackers to breach govt agencies
Chinese hackers have been exploiting a remote code execution flaw in Ivanti Endpoint Manager Mobile (EPMM) to breach…
Chinese hackers breach US local governments using Cityworks zero-day
Chinese-speaking hackers have exploited a now-patched Trimble Cityworks zero-day to breach multiple local governing bodies across the United…
FTC finalizes order requiring GoDaddy to secure hosting services
The Federal Trade Commission (FTC) has finalized an order requiring web hosting giant GoDaddy to secure its services…
Signal now blocks Microsoft Recall screenshots on Windows 11
Signal has updated its Windows app to protect users’ privacy by blocking Microsoft’s AI-powered Recall feature from taking…
Unpatched critical bugs in Versa Concerto lead to auth bypass, RCE
Critical vulnerabilities in Versa Concerto that are still unpatched could allow remote attackers to bypass authentication and execute…
Anthropic web config hints at Claude Sonnet 4 and Opus 4
Anthropic is secretly working on two new models called Claude Sonnet 4 and Opus 4, which are believed…
OpenAI hints at a big upgrade for ChatGPT Operator Agent
ChatGPT’s Operator, which is still in research preview, will soon become a “very useful tool,” according to Jerry…
Critical Samlify SSO flaw lets attackers log in as admin
A critical Samlify authentication bypass vulnerability has been discovered that allows attackers to impersonate admin users by injecting…