Security researchers have uncovered a significantly upgraded version of the ToxicPanda Android banking trojan that now targets 349 financial applications across 16 countries, blocks Google Play at the network level, and hijacks Android's wireless debugging feature to seize shell-level control of inf
A threat actor operating under the name "Ransom Busters" is contacting ransomware victims directly, posing as an independent recovery service that can delete stolen data and provide decryption keys in exchange for payment. Security researchers now believe the entity is not a legitimate third party a
Industrial and energy giants Philips, General Electric (GE), and Shell have all confirmed they are investigating claims made by the Clop ransomware gang that it stole data from their systems. The disclosures follow a wider extortion campaign in which the cybercrime group exploited a critical vulnera
Security researchers have uncovered a fresh wave of attacks in which the North Korean state-sponsored hacking group Lazarus exploited a previously unknown Windows vulnerability to break into defense, aerospace, and aviation organizations across Europe, India, and South America. The group weaponized
A ransomware operation tracked as DeadLock has built its victim-communication and data-leak systems around blockchain technology, making the group's infrastructure considerably harder for defenders and law enforcement to dismantle. Security researchers first flagged the technique in a report publish
Security researchers have identified a new version of the XCSSET malware family, tracked as v40, spreading through compromised Xcode projects and vulnerable Git repositories. Analysts at Palo Alto Networks' Unit 42 documented the campaign in a detailed technical report. BleepingComputer separately
Security researchers have connected a firmware vulnerability in Coldcard hardware wallets to a string of thefts that drained an estimated 88.6 million USD in Bitcoin from thousands of victims. The flaw sits in the device's random number generator, the component responsible for creating the secret se
Security researchers have exposed a sustained espionage campaign in which the Russian state-sponsored hacking group known as Laundry Bear, also tracked as Void Blizzard or TA488, exploited zero-day vulnerabilities in two of the world's most widely deployed webmail platforms, Microsoft Exchange Outlo
Security researchers have uncovered two separate incidents in which criminals allowed an autonomous AI agent to operate with little or no human oversight during a live intrusion — one against a Thai government ministry and one carried out by a ransomware operation from start to finish. Researc
Security researchers have identified a new Windows-based malware strain called Dolphin X that combines the credential-stealing capabilities of a traditional infostealer with an artificial-intelligence-driven feature designed to help criminals decide which infected computers are worth attacking first