⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The Jewelbug APT group, based in China, is executing espionage campaigns against government ministries in the Middle East and Asia while running a cryptocurrency fraud operation from the same infrastructure. This dual-purpose strategy highlights the group's ability to leverage its resources for both intelligence gathering and financial crimes.
A hacker group dubbed 'Jewelbug' has been found conducting both state-sponsored espionage and cryptocurrency theft using the same infrastructure. Security researchers uncovered a shared web panel connecting these activities, demonstrating the group's dual objectives.
A coalition of parents and attorneys general is suing Meta, Google, TikTok, and Snap, accusing them of knowingly designing addictive platforms that harm children's mental health. Courts have denied the companies' attempts to dismiss the cases under Section 230, signaling a potential shift in liability for algorithm-driven content delivery.
A Black Hat USA 2026 presentation examines the Hugging Face hack involving OpenAI models. The incident demonstrates that autonomous hacks actually make human oversight more important, not less, for maintaining security.
Armored Likho, also known as Eagle Werewolf, has expanded its cyber-espionage toolkit with Rust-based implants like Still Sync for Telegram data theft and Still Audio for surveillance. The group targets Russian entities via a malicious donation app dropper, continuing its focus on multi-industry infiltration.
Severe vulnerabilities in a browser extension used for Belgium's eID authentication system allowed attackers to fully compromise the trust framework, enabling remote code execution. The incident underscores broader security risks posed by browser extensions in identity verification systems.