Malicious Android apps on Google Play downloaded 42 million times
Hundreds of malicious Android apps on Google Play were downloaded more than 40 million times between June 2024 and May 2025, notes a report from…
Month: November 2025
New ‘SleepyDuck’ Malware in Open VSX Marketplace Allow Attackers to Control Windows Systems Remotely
A sophisticated remote access trojan named SleepyDuck has infiltrated the Open VSX IDE extension marketplace, targeting developers using code editors like Cursor and Windsurf. The…
Samsung triple zero handset firmware mystery deepens
The mystery over how 71 Samsung mobile phones were delivered to Australian consumers with firmware problems that might leave users high and dry when trying…
FBI Warns of Criminals Posing as ICE, Urges Agents to ID Themselves
Criminals posing as US immigration officers have carried out robberies, kidnappings, and sexual assaults in several states, warns a law enforcement bulletin issued last month…
Google Expands Chrome Autofill to Passports and Licenses, But Is It Safe?
Google Chrome browser’s new enhanced autofill feature can now remember and automatically fill in personal data such as licenses, passports, and even vehicle identification numbers.…
New ATO division to de-risk major system transformations
The tax office has created a new division to manage risk around major ATO technology projects and system transformations, shuffling its deputy commissioner ranks in…
Google fixed a critical remote code execution in Android
Google fixed a critical remote code execution in Android Pierluigi Paganini November 04, 2025 Google’s November 2025 Android update fixes two flaws in the System…
Microsoft removing Defender Application Guard from Office
Microsoft plans to remove Defender Application Guard from Office by December 2027, starting with the February 2026 release of Office version 2602. The Microsoft Defender Application…
A Cybercrime Merger Like No Other — Scattered Spider, LAPSUS$, and ShinyHunters Join Forces
The nascent collective that combines three prominent cybercrime groups, Scattered Spider, LAPSUS$, and ShinyHunters, has created no less than 16 Telegram channels since August 8,…
SesameOp Backdoor Abused OpenAI Assistants API for Remote Access – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
Cybersecurity researchers have identified a new backdoor called SesameOp that uses the OpenAI Assistants API to exchange instructions and data, replacing the typical attacker-controlled servers…
Nordic investors drive investment in region’s defence sector
The dramatic increase in the defence budgets of North Atlantic Treaty Organization (Nato)-aligned Nordic countries in 2026 is primed to deliver significant growth opportunities for…
SesameOp Leveraging OpenAI Assistants API for Stealthy Communication with C2 Servers
A sophisticated new backdoor named SesameOp has emerged with a novel approach to command-and-control communications that fundamentally challenges traditional security assumptions. Discovered in July 2025…