Chinese Mustang Panda hackers deploy infostealers via CoolClient backdoor
The Chinese espionage threat group Mustang Panda has updated its CoolClient backdoor to a new variant that can steal login data from browsers and monitor the…
Latest Cybersecurity News — Page 485
View all →
NSW gov to make AI risk assessments less “subjective”
The NSW government has updated its AI risk assessment framework, requiring departments and agencies to adhere to a more rigid decision making process based on…
Google troubled by EU move to help AI, search rivals access services
Google will be given guidance by European Union antitrust regulators on how to help online search rivals and artificial intelligence developers access its services and…
6000+ Vulnerable SmarterTools SmarterMail Servers Exposed to Actively Exploited RCE Vulnerability
Over 6,000 SmarterMail servers exposed on the internet are running vulnerable versions that are at risk of active remote code execution (RCE) attacks. Security researchers…
Meta Faces Legal Action Over Claims of Accessing All WhatsApp User Messages
A class-action lawsuit filed in San Francisco federal court accuses Meta Platforms of systematically misleading billions of WhatsApp users about the protection of their messages.…
WhatsApp unveils high-security mode – iTnews
Meta’s WhatsApp messaging service is offering users an advanced security mode, joining a growing number of US tech firms that are letting users opt into…
WhatsApp rolls out Strict Account settings to strengthen protection for high-risk users
WhatsApp rolls out Strict Account settings to strengthen protection for high-risk users Pierluigi Paganini January 27, 2026 Meta announced new Strict Account Settings on WhatsApp…
Your Tier 1 Analyst at SOC Team Is Failing at Effective Triage
Security Operations Centers live or die by their ability to respond quickly and accurately to alerts. At the heart of this process is alert triage — the initial evaluation that decides…
New Deepfake Phishing Attack Targets Bitcoin Users via Zoom and Teams
A sophisticated deepfake-enabled phishing campaign is actively targeting Bitcoin users through fake Zoom and Microsoft Teams calls. The attackers are exploiting video conferencing, Telegram, and…
Bureau of Meteorology’s VMware bill more than doubles
The Bureau of Meteorology’s VMware licensing bill for the next three years has more than doubled to $12.2 million, the latest example of a federal…
WinRAR path traversal flaw still exploited by numerous hackers
Multiple threat actors, both state-sponsored and financially motivated, are exploiting the CVE-2025-8088 high-severity vulnerability in WinRAR for initial access and to deliver various malicious payloads. The security issue…
Attackers Exploiting React2Shell Vulnerability to Attack IT Sectors
Threat actors have started targeting companies in the insurance, e-commerce, and IT sectors through a critical vulnerability tracked as CVE-2025-55182, commonly known as React2Shell. This…