Langflow RCE under active attack months after a patch was shipped
An added complexity is that Langflow is shipping with an auto-login behavior, allowing unauthenticated users with a valid session to reach the vulnerable endpoint without…
Month: June 2026
Wiz Integrates with Akamai for Edge Security
Your cloud security posture is only as strong as the weakest link in your stack, and for most teams shipping applications at scale, that weak…
How do you protect computers from attackers if you’re not
The historical answer to this question has been antivirus and firewalls. However, the last several years have demonstrated hackers can slip past these preventative technologies…
Webinar: How behavioral AI stops phishing and account takeovers
Email attacks have become increasingly difficult to detect as attackers use AI-generated phishing campaigns, trusted business identities, and authentication workflows that appear legitimate to both…
SearchJack Campaign Uses 23 Chrome Extensions to Hijack Searches of 758,000 Users
A coordinated campaign of 23 deceptive Chrome browser extensions has been quietly stealing users’ search queries and routing them through hidden revenue systems. The operation,…
Meta Tapped a Pentagon Supplier to Prototype Face Recognition for Its Glasses
Meta is testing face-recognition software built by a company that sells surveillance tools to police departments and the United States military, as it explores bringing…
Velvet Ant Hackers Backdoor OpenSSH and PAM to Spy on Critical Infrastructure Network
A long-running, highly disciplined intrusion attributed to the China-nexus actor known as Velvet Ant has been revealed as a near-decade campaign of silent access that…
Over 50 Android Apps Found Spreading MagicAd Trojan via Official Stores
A deceptive trojan is outsmarting Android’s built-in defences to bombard users with unstoppable background advertisements. Security analysts at Doctor Web recently found Android.MagicAd.1, a trojan…
PhishLumos: Exposing phishing campaigns that evade detection by hiding content
Phishing remains one of the most stubbornly persistent threats in cybersecurity: humans are tired, distracted, trusting, and susceptible to urgency and authority in ways that…
A week in security (June 8 – June 14)
Last week on Malwarebytes Labs: Stolen iPhones could soon be worth a lot less to thieves Fake verification pages are stealing Steam accounts from players…
Sniper Dz Scams Target MENA Users via Fake Facebook Offers and Browser Alerts
Ravie LakshmananJun 15, 2026Social Engineering / Browser Security Cybersecurity researchers have disclosed details of fraudulent activity targeting users across the Middle East and North Africa…
UK Finance ‘shocked but not surprised’ by rise in fraud as tech firms ‘profit’ from it
UK Finance said it was “shocked but not surprised” at a 4% increase in the amount stolen by payment fraudsters, and called for more action…