Sexually Explicit Deepfake Sites Target 100-Plus Politicians in Europe
Almost 150 politicians across Europe have been included on harmful deepfake pornography websites over the last few years, according to new research seen by WIRED.…
Month: September 2026
Sandworm-Linked Cyclops Blink Returns With Network Scanning and Packet-Sniffing Capabilities
A newly identified Cyclops Blink variant has resurfaced on compromised Cisco Secure Firewall Management Center (FMC) appliances, adding active internal-network scanning and programmable packet-sniffing capabilities…
WhatsApp Restricted Chat locks a conversation to your primary phone
WhatsApp is building a per-chat setting that keeps a conversation on a single phone. The setting, called Restricted Chat, sits in the Android beta distributed…
A week in security (September 7 – September 13)
Last week on Malwarebytes Labs: Crypto customers targeted by scammers after email marketing provider breach Android malware creates a hidden copy of your banking app…
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
Ravie LakshmananSep 14, 2026Malware / Browser Security A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers…
Three JFrog Artifactory Flaws Exploited for Backdoor Deployment
Threat actors have been exploiting three high-severity vulnerabilities in JFrog Artifactory to compromise deployments and install backdoors, cybersecurity firm Wiz reports. Many organizations use Artifactory…
Anthropic CEO Calls for an AI Slowdown. Is It Possible?
Anthropic CEO Calls for an AI Slowdown. Is It Possible? Pierluigi Paganini September 14, 2026 Anthropic CEO calls for AI slowdown, proposes embedded evaluators and…
Discovering a stored XSS that affects over 900k websites (CVE-2016-9751) — Jon Bottarini
In my free time when I’m not hunting for bugs in paid programs, I like to contribute a bit to the open-source community and check…
Security Posture Management for GitHub: spotting and fixing risks in your GitHub organization just got a lot easier
A few months ago, Wiz introduced Wiz Code, a leap forward in enabling developers and security teams to shift security left — enabling positive security…
Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part Four
In previous articles in this multipart series [1] [2] [3], malware researchers on the Elastic Security Labs team decomposed the REMCOS configuration structure and gave…
NCSC Warns of Critical Check Point VPN Flaws as Large-Scale Exploitation Is Expected
The Dutch National Cyber Security Center (NCSC) has issued an urgent warning over two critical vulnerabilities in Check Point VPN products, saying it expects large-scale…
Casbaneiro Banking Trojan Uses Distributed C2 Servers to Evade Detection and Target Bank Users
A Casbaneiro banking Trojan campaign targeting users across Latin America, using phishing lures, geofenced delivery infrastructure, and distributed command-and-control (C2) servers to obscure malicious activity.…