Apple has released security updates for supported iPhones, iPads and Macs after reports that a file-processing flaw may have been used against selected iPhone users. Malwarebytes Labs says installing the latest update offered through Software Upda…
Windows users, particularly Ukrainian speakers, are being targeted through compromised websites that display fake Cloudflare verification checks. The resulting Lunex infection can weaken security monitoring, steal browser credentials and cryptocur…
Mac users who install cracked software or unfamiliar apps face a changing threat from MacSync, malware designed to steal passwords, wallet data and other sensitive files. A newly observed version can also install a backdoor that gives attackers an…
Mac users should avoid installing Meta’s Muse AI assistant for now after a researcher found that software already running on the Mac could redirect its dictation traffic. The weakness is not a drive-by attack: an attacker must first get malware, a…
Cisco Talos has analyzed a Windows implant that asks commercial AI models to choose actions such as stealing credentials, gaining persistence or injecting code into another process. There is no confirmed real-world deployment, and the publicly obs…
A Windows backdoor called TASK#STOMP steals business documents, saved Wi-Fi passwords, clipboard text and screenshots while accepting commands from its operators. Its known reach is unclear because researchers analyzed only one infected computer.
A manufacturing company in the Middle East had its Active Directory Group Policy hijacked, pushing ransom messages and disruptive settings to every domain-joined Windows workstation. The April 2026 incident matters to organizations using Windows d…
Developers who installed any of 13 identified npm packages may have exposed sensitive data stored by Chrome extensions. The packages delivered a newly documented JavaScript data thief called WeaselBiscuit on Windows, macOS and Linux.
A North Korea-linked campaign used fake job interview projects to target developers, including a DevOps engineer at an Indian IT services company with no cryptocurrency ties. Running a booby-trapped Terraform project could expose cloud credentials…
Android users who install apps from links in texts, ads or unofficial download pages are at risk from RatHat, a Trojan designed to steal financial credentials and device PINs. The attack still depends heavily on persuading the victim to sideload a…
Government organizations in Latin America are being targeted with SparroWocky, a new Windows backdoor linked to the China-aligned FamousSparrow group. The malware can steal files, take screenshots, run commands and use an infected computer to rela…
Windows users who downloaded movies through torrent sites may have received MovieReaper malware instead. The campaign has affected hundreds of individuals and organizations across several countries.
Ransomware incidents affecting Japanese organizations rose slightly in the first seven months of 2026, with 90 victims recorded. Smaller businesses faced most of the impact, while manufacturing remained the hardest-hit sector.
NightEagle, also tracked as APT-Q-95, has begun targeting businesses in Russia after previously focusing on organizations in Asia. The campaign matters mainly to companies running Microsoft Exchange, VPN access and Windows domain networks rather t…
Mac users are being lured into pasting commands into Terminal by websites that claim to install useful or cracked software. The commands can install Atomic macOS Stealer (AMOS), which targets passwords, browser data, cryptocurrency wallets and oth…
A fake Avast renewal page told Belgian users they had been charged €129.99, then asked for contact details to cancel the nonexistent subscription. Anyone receiving an unexpected antivirus renewal notice should verify it through their bank and the…
Cybercriminals hijacked HBO Max’s verified Reddit account and used it to publish 108 malicious ads in about 48 hours, according to researchers. Anyone who followed those ads and pasted a suggested command into Terminal, PowerShell or Windows Run m…
Google is rolling out Chrome 153 for Windows, macOS and Linux with a fix for a vulnerability already being exploited. Desktop Chrome users should check for the update now, especially if they rarely restart the browser.
The Gigabud Android banking Trojan can create a separate work profile and place a cloned banking app inside it, according to Group-IB researchers. People who install apps from phishing links are at risk of stolen credentials and fraudulent transac…
A Russia-aligned threat group placed a decoy request inside a malicious script in an attempt to make AI-assisted code scanners stop analyzing it. The finding mainly matters to organizations that rely on large language models to review files or hel…