Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Chinese Hackers Using New iPhone Hack to Spy On Uyghurs Muslims
A Chinese hacking group has been found leveraging a new exploit chain in iOS devices to install a spyware implant targeting the Uyghur Muslim minority in China…
iOS 13 Now Warns Users Of Background Apps Secretly Tracking Location
Applications tracking users' locations have been a pain in the neck for some time. While location data seems necessary informationiOS 13 Now Warns Users Of Bac…
Over A Billion Malicious Ad Impressions Exploit WebKit Flaw to Target Apple Users
The infamous eGobbler hacking group that surfaced online earlier this year with massive malvertising campaigns has now been caught running a new campaign explo…
1-Click iPhone and Android Exploits Target Tibetan Users via WhatsApp
A team of Canadian cybersecurity researchers has uncovered a sophisticated and targeted mobile hacking campaign that is targeting high-profile members of vario…
WhatsApp 'Delete for Everyone' Doesn't Delete Media Files Sent to iPhone Users
Mistakenly sent a picture to someone via WhatsApp that you shouldn't have?Well, we've all been there, but what's more unfortunate is that the 'Delete for Every…
Apple, Google and others condemn UK plan to view encrypted chats
Major players within the tech industry have long-opposed the idea of government access to users' messages and chat conversations -- now they're continuing the …
Fedora 43 dotnet10.0 Critical CVE Fixes Update 2026-d9817786d6
The latest Fedora update adds .NET 10.0 Runtime and SDK, improving features and fixing multiple vulnerabilities, enhancing cross-platform application developme…
Fedora 44 Netatalk Service Disruption and Information Leak Advisories
Fedora has released an update for Netatalk version 4.5.1, introducing security fixes and improvements to the Apple Filing Protocol file server software and its…
Fedora 44 dotnet8.0 Important Threat Fix 2026-9aef53fa96
Fedora has released an update for .NET SDK 8.0.129 and Runtime 8.0.29, addressing multiple security vulnerabilities and enhancing performance across platforms …
How to Detect a Keylogger on Your System
Comprehensive detection guide covering API-hook, kernel-mode, form-grabber, and hardware keyloggers on Windows, macOS, and Linux — with step-by-step removal in…
Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account
The popular HTTP client known as Axios has suffered a supply chain attack after two newly published versions of the npm package introduced a malicious dependen…
North Korea-Linked UNC1069 Uses AI Lures to Attack Cryptocurrency Organizations
The North Korea-linked threat actor known as UNC1069 has been observed targeting the cryptocurrency sector to steal sensitive data from Windows and macOS syste…
Debian usbmuxd DSA-6125-1 Path Traversal Risk CVE-2025-66004
A path traversal vulnerability was discovered in usbmuxd, a multiplexor daemon used to coordinate USB connections from and to Apple devices (iPhone, iPad, iPod…
WhatsApp Rolls Out Lockdown-Style Security Mode to Protect Targeted Users From Spyware
Meta on Tuesday announced it's adding Strict Account Settings on WhatsApp to secure certain users against advanced cyber attacks because of who they are and wh…
Debian 11: usbmuxd Important File Deletion Threat DLA-4417-1 CVE-2025-66004
It was discovered that usbmuxd, USB multiplexor daemon for iPhone and iPod Touch devices, incorrectly handled certain paths received with the SavePairRecord co…
Debian: webkit2gtk Important Memory Corruption Issues DSA-6083-1
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-14174 Apple and the Google Threat Analysis Group discovered that proce…
Malicious Rust Crate Delivers OS-Specific Malware to Web3 Developer Systems
Cybersecurity researchers have discovered a malicious Rust package that's capable of targeting Windows, macOS, and Linux systems, and features malicious functi…
Google Brings AirDrop Compatibility to Android’s Quick Share Using Rust-Hardened Security
In a surprise move, Google on Thursday announced that it has updated Quick Share, its peer-to-peer file transfer service, to work with Apple's equipment AirDro…
Hackers Abuse Blockchain Smart Contracts to Spread Malware via Infected WordPress Sites
A financially motivated threat actor codenamed UNC5142 has been observed abusing blockchain smart contracts as a way to facilitate the distribution of informat…
Debian: DSA-6014-1: gimp
Several vulnerabilities were discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of ar…
Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3
Docker has released fixes to address a critical security flaw affecting the Docker Desktop app for Windows and macOS that could potentially allow an attacker t…
Chinese Firms Linked to Silk Typhoon Filed 15+ Patents for Cyber Espionage Tools
Chinese companies linked to the state-sponsored hacking group known as Silk Typhoon (aka Hafnium) have been identified as behind over a dozen technology patent…
Fake Gaming and AI Firms Push Malware on Cryptocurrency Users via Telegram and Discord
Cryptocurrency users are the target of an ongoing social engineering campaign that employs fake startup companies to trick users into downloading malware that …
North Korean Hackers Target Web3 with Nim Malware and Use ClickFix in BabyShark Campaign
Threat actors with ties to North Korea have been observed targeting Web3 and cryptocurrency-related businesses with malware written in the Nim programming lang…