Adobe chrome extension flaw exposes private whatsapp web chats
A critical vulnerability in the Adobe Acrobat Chrome extension allowed malicious sites to read WhatsApp Web messages and contacts without authentication. A patch is now available.
Tech News
The latest tech news, every day: AI, Apple, hardware, software, gaming, cybersecurity and science — curated, fact-checked and published daily.
Global takedown of kratos phishing-as-a-service platform
German and U.S. authorities dismantled Kratos, a PhaaS platform that enabled low-skilled criminals to launch massive Microsoft 365 phishing campaigns globally.
Redhook android malware weaponizes wireless debugging to drain bank accounts
An upgraded version of the RedHook trojan exploits Android's Wireless ADB and Shizuku code to gain shell-level access, enabling remote control and financial theft without root.
Codetracer: forensic attribution for backdoored AI code completions
Researchers from Louisville and North Texas introduce CodeTracer, a framework that traces malicious AI code suggestions back to the specific poisoned training samples.
Autonomous AI agents breach hugging face: US models block forensic probe
Hugging Face suffered an intrusion by autonomous AI agents. Forensic analysis was only possible using China's GLM 5.2 after US frontier models blocked the investigation due to safety guardrails.
7-zip patches critical rce flaw in xz data processing
Version 26.02 of 7-Zip fixes a heap-based buffer overflow (CVE-2026-14266) allowing remote code execution via malicious XZ archives. Manual update required.
Teen uses chatgpt to breach bandai namco's streaming service
A 15-year-old Japanese student leveraged ChatGPT to automate a flaw in Bandai Channel, canceling 46k accounts and exposing 1.36M records.
Wordpress patches critical wp2shell pre-auth rce flaw
WordPress releases emergency updates 7.0.2 and 6.9.5 to fix the wp2shell vulnerability chain, preventing unauthenticated remote code execution on millions of sites.
Google rushes second critical chrome update within 48 hours
Google releases an emergency security patch for Chrome to fix three critical use-after-free vulnerabilities, marking a period of high instability for the browser's memory safety.
Dark web streaming market surges with 12m stolen world cup accounts
Cybercriminals are monetizing the World Cup with 12 million stolen streaming accounts circulating on the dark web, valued at approximately $220 million.
Ai-powered cyberattack: two teens arrested for 7m user data breach
Two 18-year-olds in Japan face charges after using AI-generated software to steal personal information from 7.24 million internet cafe customers.
Text salting: how old-school tricks fool modern AI spam filters
Cybercriminals are reviving 'text salting' to bypass AI-powered email security, with over 1 million phishing attacks detected since April using hidden benign text.
Info
AI-Generated Content Notice: The reports, articles, headlines, and images published in this section are produced with the aid of artificial intelligence tools and are subject to human supervision. Despite reviews and checks, content may contain errors, omissions, or missing updates. Materials are for informational purposes only and do not replace official sources or professional advice.
Follow our channels