QR codes can be used to crack this vital browser security tool
Browser isolation runs all scripts in a remote, or virtual environment, but QR codes still make it through If a device is infected with malware, it can get commands via…
New domain names such as .shop and .xyz are proving popular for cybercrime
Report finds new generic top-level domains, such as .xyz, have disproportionally more phishing websites Researchers believe it is because they are affordable and come with very few registration requirements More…
Apple is taking over this popular password manager plugin
Apple has introduced Passwords support for Firefox The extension allows Mac users to store, sync, and autofill credentials Apple has apparently taken ownership of an existing extension Apple has gradually…
More_eggs malware hatches two new variants for MaaS operation
Security researchers found two new malware variants, an infostealer and a loader The developers seem to be the same group that’s behind more_eggs The infostealer can grab passwords, cookies, and…
Salt Typhoon telecom victims rises to 8, with ‘dozens’ of countries affected
US government representatives say at least eight US telcos were compromised by the Chinese The hackers have probably not yet been completely removed China is currently not responding to the…
Hackers are building bespoke Mac malware using GenAI
Mac users need to stop believing that macOS is safer than Windows Generative AI has helped non-coders to create their own malware Social engineering continues to be the most common…
Corrupted Microsoft Word files used to launch phishing attacks
Security researchers saw corrupted files used in phishing campaigns These files bypass email protection solutions Word can easily restore them, presenting malicious content to the victim Cybercriminals have found a…
Apple employee sues company for allegedly spying on personal worker devices
Apple is facing claims of illegal employee monitoring in a new lawsuit The lawsuit claims employees are also prevented from discussing working conditions Separate complaints allege compensation differences based on…
Linux devices are being hit by LogoFAIL vulnerability, Bootkitty installed
LogoFAIL, image parsing vulnerabilities on Linux and Windows, are being actively abused Researchers are saying crooks are installing Bootkitty, the first-ever Linux UEFI bootkit Bootkitty works on both Linux and…
AWS launches security tool to help businesses recover from cyberattacks
AWS Security Incident Response aims to tackle the challenge of addressing various security incidents Looks to lessen strain on cybersecurity teams Available to AWS customers across the world now Amazon…