⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Apple has expanded its threat-notification system for mercenary spyware, now displaying warnings directly on the iPhone lock screen and in Settings. These high-confidence alerts aim to make it harder for targeted individuals to overlook the risk, complementing email and account page notifications.
Cyera's $1 billion acquisition of Oasis Security aims to merge data security and identity management into a unified control plane for AI agents. The deal redefines privileged access using business context instead of static roles, reflecting the growing need to secure AI-driven workflows.
Meta is introducing an optional WhatsApp beta feature called Scam Alert that uses on-device machine learning to detect likely scam messages from people outside a user's contacts. The feature shows a warning banner but does not block anything, letting users block, report, trust, or continue the conversation.
Shell is investigating a potential security incident after the Clop ransomware gang claimed it stole 89GB of data from the oil giant. The company has not publicly confirmed the full scope or authenticity of the stolen information.
A new free service called DecryptAds makes public adtech disclosure files easy to search, showing which companies track users across websites and apps. It cross-references ads.txt, app-ads.txt, and sellers.json to expose data brokers, supply-chain relationships, and advertising firms based in high-risk countries.
Researchers at SpecterOps have detailed a post-exploitation technique that activates Chrome DevTools Protocol (CDP) inside a running Chrome or Edge process on Windows, enabling cookie theft, data exfiltration, and session hijacking. The method assumes the attacker already has code execution on the host and does not exploit a browser vulnerability; instead, it uses a Beacon Object File (CDP-Enable-BOF) to inject a debugging server into the existing process.