Major platforms have the tools to stop sexual extortion, but they’re not using them – new report

It begins with a follow request. An 18-year-old male accepts one on Instagram from an attractive female stranger. She likes ...
Infosecurity Magazine

Phishing Campaign Hides Lua Loader as TrueType Font File

A large-scale phishing operation has been observed disguising a malicious script as a TrueType font file (.tff). Using the ...
The Hacker News

Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found

Google and Microsoft pulled ModHeader after researchers found a dormant collector built to encrypt and upload up to 1,000 ...
SecurityWeek

Network of 200 GitHub Repositories Used for Malware Infection

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.
CSO Online

Fake TTF files deliver stealthy malware in global phishing campaign

Attackers were found using a Lua-based malware loader posing as a TrueType font tile, with layered obfuscation and fileless ...

Reelful’s AI turns your camera roll into short-form videos for social media

The app is designed for people who want to create social content, but find traditional video editing tools too complex or ...
Microsoft

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...
The Hacker News

New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands

New TELEPUZ malware spreads through ClickFix, then steals browser cookies, logs keystrokes, runs commands, and installs ...

AI agent exploits Langflow in first fully autonomous ransomware attack

has documented what it says is the first ransomware operation carried out from start to finish by an autonomous artificial ...
SecurityWeek

‘ClickLock Stealer’ Bypasses macOS Security With Social Engineering, Process Killing

A new macOS malware named ClickLock Stealer leverages social engineering and process killing to bypass the operating system’s ...

Nearly 300 GitHub repos pose as legit software to push malware

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...

'CrashStealer' malware poses as an Apple tool to steal passwords & Mac data

CrashStealer, a newly documented Mac infostealer, used an Apple-notarized meeting app to reach victims before stealing ...