New ‘Massiv’ Android banking malware poses as an IPTV app
A new Android banking malware, which researchers named Massiv, is posing as an IPTV app to steal digital identities and access online banking accounts. The…
Latest Cybersecurity News — Page 304
View all →
Critical Authentication Bypass in better-auth API Keys Plugin Allows Unauthenticated Account Takeover
Authentication Bypass better-auth API Keys A critical authentication bypass vulnerability in the better-auth API keys plugin allows unauthenticated attackers to mint privileged API keys for…
How to Organize Safely in the Age of Surveillance
For all these approaches, from the fully public to the paranoid, the same principle applies as in a Signal conversation: A piece of information is…
CISA Alerts Organizations to Honeywell CCTV Flaw Enabling Account Takeovers
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory warning about a critical vulnerability affecting multiple Honeywell CCTV camera products that could allow…
Infostealer Found Stealing OpenClaw AI Identity and Memory Files
In a discovery that marks a worrying shift in cybercrime, researchers at Hudson Rock have identified a live case where a virus successfully snatched the…
Compliance Scorecard v10 delivers context-driven AI for explainable compliance decisions
Compliance Scorecard announced the release of v10, introducing governed, audit-ready AI designed to support defensible compliance decision-making for managed service providers (MSPs). Compliance Scorecard v10…
Minister wants ‘logical conclusion’ to review of digital evidence in light of Post Office scandal
An amendment to the controversial rule that courts presume computers are reliable was formerly proposed during a House of Lords debate on 11 February. Ever since…
From Acceleration to Exposure: Why AI Demands Mature AppSec
For most engineering teams, AI feels like a breakthrough years in the making. Code gets written faster, reviews move quicker, and releases that once took…
AI Dev Tool Cline’s npm Token Hijacked by Hackers for 8 Hours
A compromised publish token gave attackers brief but concerning access to the Cline CLI npm package, exposing developers who installed it during an 8-hour window…
Microsoft Defender Introduces Centralized Script Library Powered by Copilot for Live Response
Microsoft has unveiled a significant enhancement to its Defender platform: centralized library management for live response operations, powered by Microsoft Security Copilot. This new capability…
Open-source benchmark EVMbench tests how well AI agents handle smart contract exploits
Smart contract exploits continue to drain funds from blockchain projects, even as auditing tools and bug bounty programs grow. The problem is tied to how…
Telstra says AI cost-benefits need close examination
Telstra is monitoring its AI investments closely to ensure that the costs don’t start to outweigh the benefits, as it reported a solid result for…