GitHub abused to distribute payloads on behalf of malware-as-a-service
The repository offered the MaaS a distribution channel not blocked in many networks.
Dan Goodin
–
|
2
Security
Google finds custom backdoor being installed on SonicWall network devices
Overstep backdoor nukes key log entries, making detection hard.
Dan Goodin
–
|
25
Hackers exploit a blind spot by hiding malware inside DNS records
Technique transforms the Internet DNS into an unconventional file storage system.
Dan Goodin
–
|
66
Nvidia chips become the first GPUs to fall to Rowhammer bit-flip attacks
GPUhammer is the first to flip bits in onboard GPU memory. It likely won't be the last.
Dan Goodin
–
|
52
New Windows 11 build adds self-healing “quick machine recovery” feature
New recovery mode lets Microsoft fix "widespread boot issues" affecting PCs.
Andrew Cunningham
–
|
70
Pro basketball player and 4 youths arrested in connection to ransomware crimes
Suspects were allegedly involved in a string of ransomware breaches.
Dan Goodin
–
|
19
Browser extensions turn nearly 1 million browsers into website-scraping bots
Extensions load unknown sites into invisible Windows. What could go wrong?
Dan Goodin
–
|
57
Critical CitrixBleed 2 vulnerability has been under active exploit for weeks
Exploits allow hackers to bypass 2FA and commandeer vulnerable devices.
Dan Goodin
–
|
37
Most Read
Unless users take action, Android will let Gemini access third-party apps
Important changes to Android devices took effect starting Monday.
Dan Goodin
–
|
217
“No honor among thieves”: M&S hacking group starts turf war
A clash between criminal ransomware groups could result in victims being extorted twice.
Financial Times
–
|
29
Provider of covert surveillance app spills passwords for 62,000 users
Creators say app is intended for parental monitoring. So why the emphasis on stealth?
Dan Goodin
–
|
83
AT&T rolls out Wireless Account Lock protection to curb the SIM-swap scourge
Move is aimed at curbing a form of abuse that costs subscribers dearly.
Dan Goodin
–
|
61
US critical infrastructure exposed as feds warn of possible attacks from Iran
Agencies warn that some US targets may be needlessly exposed.
Dan Goodin
–
|
75
Drug cartel hacked FBI official’s phone to track and kill informants, report says
Official was connected to FBI probe of cartel kingpin Joaquín “El Chapo” Guzmán.
Dan Goodin
–
|
53
Microsoft changes Windows in attempt to prevent next CrowdStrike-style catastrophe
AV vendors have worried that this could advantage Microsoft's security software.
Andrew Cunningham
–
|
82
Actively exploited vulnerability gives extraordinary control over server fleets
AMI MegaRAC used in servers from AMD, ARM, Fujitsu, Gigabyte, and Qualcomm.
Dan Goodin
–
|
46
Ubuntu disables Intel GPU security mitigations, promises 20% performance boost
Overtime defenses for Spectre-based attacks have taken their toll.
Dan Goodin
–
|
31
Canadian telecom hacked by suspected China state group
Maximum-security Cisco vulnerability was patched Oct. 2023 and exploited Feb. 2025.
Dan Goodin
–
|
53
Record DDoS pummels site with once-unimaginable 7.3Tbps of junk traffic
Attacker rained down the equivalent of 9,300 full-length HD movies in just 45 seconds.
Dan Goodin
–
|
128
Israel-tied Predatory Sparrow hackers are waging cyberwar on Iran’s financial system
The hacker group has destroyed more than $90 million held at an Iranian crypto exchange.
WIRED
–
|
190
Address bar shows hp.com. Browser displays scammers’ malicious text anyway.
Microsoft, Apple, Bank of America, and many more sites all targeted.
Dan Goodin
–
|
119
Cybersecurity takes a big hit in new Trump executive order
Provisions on secure software, quantum–resistant crypto, and more are scrapped.
Dan Goodin
–
|
98
Vandals cut fiber-optic lines, causing outage for Spectrum Internet subscribers
The soaring price of copper makes networks tempting targets for thieves.
Dan Goodin
–
|
105
Coming to Apple OSes: A seamless, secure way to import and export passkeys
Apple OSes will soon transfer passkeys seamlessly and securely across platforms.
Dan Goodin
–
|
85
Found in the wild: 2 Secure Boot exploits. Microsoft is patching only 1 of them.
The publicly available exploits provide a near-universal way to bypass key protections.
Dan Goodin
–
|
41
Cybercriminals turn to “residential proxy” services to hide malicious traffic
"You cannot technically distinguish which traffic in a node is bad and which traffic is good."
WIRED
–
|
49
Millions of low-cost Android devices turn home networks into crime platforms
BadBox malware has been menacing low-cost Android devices for nearly a decade.
Dan Goodin
–
|
40
Two certificate authorities booted from the good graces of Chrome
Chunghwa Telecom and Netlock customers must look elsewhere for new certificates.
Dan Goodin
–
|
85
Meta and Yandex are de-anonymizing Android users’ web browsing identifiers
Abuse allows Meta and Yandex to attach persistent identifiers to detailed browsing histories.
Dan Goodin
–
|
185
Ransomware kingpin “Stern” apparently IDed by German law enforcement
BSA names Vitaly Nikolaevich Kovalev is "Stern," the leader of Trickbot.
WIRED
–
|
33
Spy-catcher saw “stupid” tech errors others made. FBI says he then made his own.
The wrong way to get out of Trump's America.
Nate Anderson
–
|
183
Thousands of Asus routers are being hit with stealthy, persistent backdoors
Backdoor giving full administrative control can survive reboots and firmware updates.
Dan Goodin
–
|
112
Feds charge 16 Russians allegedly tied to botnets used in cyberattacks and spying
An example of how a single malware operation can enable both criminal and state-sponsored hacking.
WIRED
–
|
50
Researchers cause GitLab AI developer assistant to turn safe code malicious
AI assistants can't be trusted to produce safe code.
Dan Goodin
–
|
60
Destructive malware available in NPM repo went unnoticed for 2 years
Payloads were set to spontaneously detonate on specific dates with no warning.
Dan Goodin
–
|
44
Authorities carry out global takedown of infostealer used by cybercriminals
Authorities, along with tech companies including Microsoft and Cloudflare, say they’ve disrupted Lumma.
WIRED
–
|
7