Online Security News, Cyber Threats and Privacy Updates

Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

TrustSink: How a Rogue MFA Provider Can Swipe Your Password

TrustSink: How a Rogue MFA Provider Can Swipe Your Password

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

BigCommerce merchants hit after Ribon app keys stolen — shopper data accessed

BigCommerce merchants hit after Ribon app keys stolen — shopper data accessed

Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR

Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR

NPM packages dodge install-script blocks by hiding payloads in runtime

NPM packages dodge install-script blocks by hiding payloads in runtime

Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws

Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws

BragJack: How a Rogue Extension Can High-Five Your Browser's AI (and Not in a Good Way)

BragJack: How a Rogue Extension Can High-Five Your Browser’s AI (and Not in a Good Way)

When an Image, an AI, and a Login Walked Into a Server: Researchers Hijack Staff Accounts

When an Image, an AI, and a Login Walked Into a Server: Researchers Hijack Staff Accounts

Gyazo Breach Exposes 23.6 Million User Records

Gyazo Breach Exposes 23.6 Million User Records