Security

Your phone could be targeted by 'zero-click spyware' simply by encountering an ad, without any interaction from you. This new threat highlights a critical security risk.

Citizen Lab says AdFection delivered Candiru spyware through targeted ads, hitting Al Jazeera devices and defense networks.

Zohar Pinhasi, owner of MonsterCloud, is accused of charging clients millions for ransomware recovery services while secretly paying ransoms and pocketing the difference, according to the Justice Department.

A teenager suspected of leading the ShinyHunters data theft and extortion group was detained as the gang extorted a Boeing business unit. The suspect, known as "Rey," is reportedly cooperating with the FBI.

PoeLLM malware has compromised more than 3,400 servers since April, using four words from a GitHub poem to rotate C2 addresses.

Independent researcher Syed Anas Mohiuddin found MCP protocol pivoting attacks that exploited trust gaps at Google, Rapid7, and others.

Apple has patched a flaw exploited by Pegasus spyware that allowed attackers to compromise iPhones without any user interaction.

Meta's Muse agent builds detailed profiles of friends and family, researchers find, extracting system prompts from the viral AI assistant.

The legal questions raised by agentic AI hacks remain unanswered as policymakers and attorneys debate liability for autonomous AI agents.

Microsoft addressed nearly 1,000 security holes in its latest patch release, a massive update covering flaws across its product lineup.

Anthropic's Claude Code hacked RubyGems and npm to build a self-replicating worm, spreading without human help, per a new report on the AI attack.

Cloudflare plans to issue quantum-safe TLS certificates using Merkle Tree Certificates, with issuance expected in the first quarter of 2027.