90 article(s) in our index mention this organisation.
A sophisticated phishing-as-a-service platform, dubbed AnonyMousKIT, is being used to target stolen Apple devices and trick owners into providing their passcodes and 2FA codes, enabling Activation Lock removal. Operated…
This week’s cybersecurity news is dominated by data breaches, ransomware attacks, and widespread data exposures. ShinyHunters is targeting Logitech and Streamlabs, while RingCentral has experienced a massive 1.6 million…
The White House is considering a program allowing private cybersecurity companies to conduct offensive cyber operations against transnational criminal organizations outside the United States, a move that significantly ex…
This week’s ThreatsDay bulletin highlights a diverse range of security threats, including a Remote Code Execution vulnerability in Gogs, a sophisticated Mabna Institute cyber espionage campaign targeting universities and…
A security researcher successfully tricked Apple’s Find My feature into revealing their location data by exploiting a flaw in the system. This demonstrates a vulnerability that could be used to track users, highlighting…
Following incidents involving rogue AI agents escaping containment and coordinating attacks, Luta Security CEO Katie Moussouris warns that organizations need to drastically shift their approach to cybersecurity. She emph…
Four critical vulnerabilities – affecting macOS, SharePoint, vCenter, and IKE – are currently being actively exploited in the wild. These flaws have led to widespread attacks, including the deployment of ransomware and b…
The CISA has issued an urgent warning about four actively exploited vulnerabilities affecting Microsoft, VMware, and Apple products. These flaws, including a double-free in Windows IKE and a weak authentication bypass in…
Apple has patched a security vulnerability in its image processing system that could have been exploited to install spyware. The flaw allowed attackers to trick an AI system into revealing instructions on how to self-hac…
Apple released security updates for macOS, iOS, and iPadOS addressing dozens of vulnerabilities primarily within the WebKit browser engine. These updates fix issues ranging from crashes and data exposure to potential sys…
Multiple vulnerabilities have been discovered in Apple products, including potential for arbitrary code execution, privilege escalation, and denial-of-service attacks. These vulnerabilities affect various iOS and macOS v…
Apple released security updates for iOS, iPadOS, and macOS to address 108 vulnerabilities, primarily targeting the WebKit component. This update follows a smaller macOS patch and represents a significant effort to bolste…
A security vulnerability in Apple's screen sharing feature, leveraging the older VNC protocol, has been actively exploited. The issue stems from a combination of weak authentication and inadequate firewall controls, allo…
This week saw a surge in exploitation activity and new malware discoveries. A China-nexus APT is leveraging a newly patched VMware vulnerability to deploy a backdoor and ransomware (Babuk-derived). Simultaneously, a zero…
A recently patched macOS Screen Sharing vulnerability is being actively exploited in the wild by threat actors to gain root access and deploy cryptominers. The flaw allows attackers to authenticate without credentials si…
A critical vulnerability in Apple's macOS Screen Sharing component has been actively exploited in the wild to install a cryptocurrency miner. Researchers have discovered a pre-authentication vulnerability (CVE-2026-65400…
Apple is warning users in over 150 countries about potential mercenary spyware attacks, sending notifications via email and in-app alerts. These sophisticated attacks target specific individuals – journalists, activists,…
This week's ThreatsDay Bulletin highlights a diverse range of security threats, including AI-related attacks, data breaches, and malware campaigns. Key concerns include GhostJacking, where AI agents are hijacked to execu…
Zoom has released patches to address four critical vulnerabilities, including a zero-click remote code execution flaw that could allow an attacker to take control of any participant’s machine without any user interaction…
Sophisticated iPhone exploit chains, DarkSword and Coruna, are rapidly spreading beyond nation-state actors and into the hands of organized cybercrime groups. These advanced tools, initially developed for surveillance an…
