Critical LangChain Core Vulnerability Exposes Secrets via Serialization Injection
Dec 26, 2025Ravie LakshmananAI Security / DevSecOps A critical security flaw has been disclosed in LangChain Core that could be exploited by an attacker to…
Category: TheHackerNews
LastPass 2022 Breach Led to Years-Long Cryptocurrency Thefts, TRM Labs Finds
Dec 25, 2025Ravie LakshmananData Breach / Financial Crime The encrypted vault backups stolen from the 2022 LastPass data breach have enabled bad actors to take…
CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution
Dec 25, 2025Ravie LakshmananVulnerability / Endpoint Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a security flaw impacting Digiever DS-2105 Pro network video…
Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability
Dec 25, 2025Ravie LakshmananVulnerability / Enterprise Security Fortinet on Wednesday said it observed “recent abuse” of a five-year-old security flaw in FortiOS SSL VPN in…
New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper
Dec 24, 2025Ravie LakshmananMalware / Endpoint Security Cybersecurity researchers have discovered a new variant of a macOS information stealer called MacSync that’s delivered by means…
Nomani Investment Scam Surges 62% Using AI Deepfake Ads on Social Media
Dec 24, 2025Ravie LakshmananOnline Fraud / Artificial Intelligence The fraudulent investment scheme known as Nomani has witnessed an increase by 62%, according to data from…
SEC Files Charges Over $14 Million Crypto Scam Using Fake AI-Themed Investment Tips
Dec 24, 2025Ravie LakshmananArtificial Intelligence / Cryptocurrency The U.S. Securities and Exchange Commission (SEC) has filed charges against multiple companies for their alleged involvement in…
Italy Fines Apple €98.6 Million Over ATT Rules Limiting App Store Competition
Dec 24, 2025Ravie LakshmananPrivacy / Antitrust Apple has been fined €98.6 million ($116 million) by Italy’s antitrust authority after finding that the company’s App Tracking…
Two Chrome Extensions Caught Secretly Stealing Credentials from Over 170 Sites
Cybersecurity researchers have discovered two malicious Google Chrome extensions with the same name and published by the same developer that come with capabilities to intercept…
A walkthrough of the Google Workspace Password Manager
Passwd is designed specifically for organizations operating within Google Workspace. Rather than competing as a general consumer password manager, its purpose is narrow, and business-focused:…
INTERPOL Arrests 574 in Africa; Ukrainian Ransomware Affiliate Pleads Guilty
A law enforcement operation coordinated by INTERPOL has led to the recovery of $3 million and the arrest of 574 suspects by authorities from 19…
U.S. DoJ Seizes Fraud Domain Behind $14.6 Million Bank Account Takeover Scheme
Dec 23, 2025Ravie LakshmananFinancial Crime / Law Enforcement The U.S. Justice Department (DoJ) on Monday announced the seizure of a web domain and database that…