Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article details a ClickFix-style attack chain delivering a macOS stealer written in Go. The malware steals passwords, iCloud Keychain data, and cached credentials, and includes a DRAIN routine that depletes cryptocurrency wallets.
This article describes UNC6671, a data extortion group that targets financial services, private equity, and professional services firms through vishing. The attackers call employees on personal phones, impersonate IT help desk staff, and use spoofed portals to steal credentials and MFA tokens.
The Senate confirmed Adam Cassady as the second ambassador-at-large for cyber policy at the State Department, where he will oversee international cyber diplomacy.
A New Mexico judge ordered Meta to pay $567 million, with most funds dedicated to treating youth harmed on its platforms, creating a new safety fund.
IEH Corporation, a military device manufacturer, reported a cyberattack to the SEC after discovering it on Tuesday and working to contain the incident.
A study of more than 6,000 patches found that AI-generated fixes fail half the time, often introducing new bugs or being bypassed.