A Chinese state-aligned hacking group has been quietly hijacking software updates by compromising network routers for over five years. The group targets popular Chinese applications including Sogou Pinyin, Baidu Netdisk, and WPS Office to deliver custom backdoors. Despite operating since at least 20
Kaspersky is launching a desktop-focused Linux antivirus product, marking a significant departure from the Linux ecosystem’s usual open-source security tools. The move raises concerns about geopolitical influence, data privacy, and whether this Windows-style approach belongs in the Linux world at al
OnlyFans is implementing criminal background checks for US creators through screening provider Checkr. The company has faced multiple lawsuits alleging misreported crimes and screening failures. This follows similar moves by platforms facing increased legislative scrutiny.
The FCC is voting to rescind cybersecurity requirements imposed after the China-linked Salt Typhoon hack that impacted AT&T, Verizon, T-Mobile and Lumen Technologies. Republican Chair Brendan Carr calls it a course correction, while Democratic Commissioner Anna Gomez warns Americans will be “less se
Security researchers found seven new ways to extract private data from ChatGPT. Microsoft is rolling out autonomous AI agents with full M365 access. The EU may loosen GDPR rules for cookies and AI training.
CISA has added a new FortiWeb vulnerability to its known exploited catalog, giving federal agencies just one week to patch. The code injection flaw affects multiple FortiWeb 8.0 versions and has already been weaponized by attackers. While rated medium severity, the active exploitation makes this urg
Meta has started warning Australian teenagers that their Facebook and Instagram accounts will be suspended when the country’s social media ban for users under 16 takes effect. The company faces significant challenges verifying ages while protecting user data from security risks.
Google has released an emergency Chrome update to fix two serious vulnerabilities, including one zero-day that’s already being exploited in the wild. The flaws involve type confusion in Chrome’s V8 JavaScript engine that could allow remote attacks. Users need to manually check for updates to ensure
University researchers discovered WhatsApp’s entire user database was openly accessible online, exposing 3.5 billion profiles including phone numbers, photos, and sensitive personal information. The vulnerability allowed anyone to download complete user profiles and analyze global WhatsApp usage pat
WhatsApp exposed nearly every user’s phone number through a basic security flaw that researchers warned Meta about back in 2017. The vulnerability allowed anyone to scrape phone numbers and profile data from the entire platform. It took eight years and a massive research demonstration before Meta fi
