New TrojPix technique uses screen pixels to exfiltrate data from air-gapped computers
The TrojPix technique, developed by Shandong University researchers, exploits the video cable to radiate faint radio signals that can be captured by a nearby...
SC Media
20 articles
Suspected pro-Russia hacktivist arrested in Spain with FBI support
The arrest is a component of Operation Riptide, an international initiative focused on disrupting malicious cyber activity and holding perpetrators accountable.
CISA to finalize critical infrastructure cyber incident reporting rule in September
The CIRCIA rule mandates that critical infrastructure entities report substantial cyber incidents within 72 hours and ransomware payments within 24 hours.
New QuimaRAT malware targets Windows, Linux, and macOS via MaaS model
QuimaRAT features a modular architecture, allowing for dynamic expansion of capabilities through encrypted plugins delivered via its command-and-control (C2)...
uBlock Origin adds protections against ClickFix attacks
The popular browser content blocker, uBlock Origin, has integrated specific rules into its badware filter list to combat ClickFix attacks.
Malicious websites trick AI agents into crypto payments, context poisoning
Indirect prompt injections hidden in HTML were discovered on sites targeting developers and cryptocurrency owners.
Defense-in-depth strategies for securing mobile applications - Ryan Lloyd - ASW #390
'Bad Epoll' vulnerability allows root access on Linux and Android
The Bad Epoll flaw resides within the epoll subsystem of the Linux kernel, a fundamental component for managing network connections and file events.
U.S. Army websites defaced in apparent 404 hijacking campaign
The defacement targeted error pages on U.S.
Iranian hackers use new modular C2 framework against Israeli organizations
The threat cluster, dubbed Cavern Manticore by Check Point Research, exhibits tactical similarities with known groups like MuddyWater and Lyceum.
NatWest CEO targeted in AI deepfake scam
The deepfake image, which depicted Paul Thwaite alongside journalist Emily Maitlis and was designed to mimic a BBC radio interview, was shared on the social ...
Sainsbury's expands facial recognition use to combat shoplifting
The supermarket chain is tripling the number of stores utilizing facial recognition, expanding from over 55 current locations to a projected 200 by year-end.
7 arrested in Vietnam for operating large anime piracy site HiAnime
HiAnime, which operated under various domains including Zoro.to and Aniwatch, provided free access to a vast library of anime, attracting hundreds of million...
Microsoft Teams allows users to turn off AI features
Microsoft has introduced an in-meeting toggle for licensed organizers and presenters to control "Meeting AI" features during live calls.
Canada's spy agency conducted state-authorized cyberattacks against drug traffickers and ransomware gangs
The CSE's annual report details three foreign "active cyber operations" targeting threats to Canadian national security.
Moody Bible Institute data breach exposes 2.3 million individuals
The breach, initially disclosed by MBI in June, saw ShinyHunters leak the stolen data after the Christian college apparently did not meet their extortion dem...
Washington state CISO Ralph Johnson to step down in September
Washington state's chief information security officer, Ralph Johnson, announced his departure from his role in September.
Opera GX browser vulnerability could allow data theft and DoS attacks
The vulnerability, found by security researcher zhero_web_security, allows for a zero-click cross-site leak (XS-Leak) by exploiting the automatic installatio...
France accelerates transition to post-quantum encryption
France's cybersecurity agency, ANSSI, announced it will stop certifying security products lacking quantum-resistant encryption starting in 2027.
North Korean PolinRider supply chain attack targets 108 unique repos
Socket says the campaign remains active and more attacks are likely.