Google’s December Android security bulletin patches 107 vulnerabilities, including two high-severity zero-days that were under active exploitation. The update also addresses seven critical-severity bugs, four in the kernel. Users are urged to update immediately.
Cybersecurity researchers found three critical vulnerabilities in the widely used PickleScan tool, each with a severity score of 9.3. The flaws, patched in September 2025, allowed attackers to bypass security scans and upload malicious machine learning models.
The threat landscape is moving faster than human-led security teams can manage. New data shows a staggering percentage of breaches are from known, unpatched flaws, while attackers exploit vulnerabilities with alarming speed. The old playbook is broken.
Upbit experienced a major security breach resulting in $30 million in losses, primarily affecting Solana-based tokens. The hack occurred just hours after parent company Dunamu announced a massive $10.3 billion acquisition by tech giant Naver. The exchange has suspended all deposits and withdrawals w
Hackers are using extremely realistic fake Windows security update screens to trick users into installing malware. The attacks employ steganography to hide malicious code within PNG images and use psychological pressure tactics. Security researchers confirm these ClickFix campaigns are bypassing cur
Security researchers have uncovered a new wave of ClickFix attacks using fake Windows security update screens. The attacks deploy credential-stealing malware through sophisticated techniques including steganography. Both individual and business users need to be aware of these dangerous social engine
Microsoft is implementing major security changes to Entra ID that will block external scripts during authentication. The update rolls out globally starting mid-to-late October 2026 and affects browser-based sign-in experiences.
Several London councils have been targeted in coordinated cyberattacks, causing IT system failures and service disruptions. Hackney Council raised its cyber security threat to critical level as experts warn about ransomware risks and data integrity concerns affecting frontline services.
Ofcom has released new safety guidelines targeting online misogyny and abuse against women. The rules focus on intimate image abuse, coordinated harassment, and platform design changes. Tech companies now face pressure to implement these protections or face regulatory action.
While competitors slash prices to under $1 monthly, ExpressVPN maintains its premium positioning during Black Friday. The company recently shifted to a three-tier pricing model and continues investing in independent security audits. Their strategy banks on users prioritizing long-term reliability ov
