Browsing Category
Security
6048 posts
DPRK-Linked Hackers Use Ethereum Dead Drops in Malicious npm Packages
DPRK-linked hackers planted malicious code in 6 npm packages that use Ethereum transactions to locate attacker-controlled servers and download malware payloads.
Samsung Patched 176 App Flaws, Including Camera Recording and Data Theft Bugs
Oversecured details 176 patched vulnerabilities in Samsung phone apps that enabled camera recordings, screen capture, DNS hijacking, and theft of sensitive data.
Non-Custodial Crypto Payment Gateways: Why the Security Model Matters for Merchants
Disclosure: This article was prepared in collaboration with Bcon Global. The information provided here is based on their…
Fake Zoom Installer Targets Mac and Windows With Overlord RAT
A fake Zoom installer delivers Overlord RAT to macOS and Windows devices while installing the genuine Zoom app to make the infection appear legitimate to users.
Should Enterprises Stop Building Their Own Base Images?
Managed base images could reduce patching workloads and vulnerability backlogs while enterprises retain security and compliance controls through a hybrid model.
XSS2Shell Vulnerability Puts 500 Million WordPress Sites at Risk of RCE
The XSS2Shell bug in WordPress could turn a failed login into server code execution after an attacker tricks a logged-in administrator; update to version 7.0.3.
Application security in 2026 is an exposure management problem
Explore how application security in 2026 uses continuous testing, API visibility, AI risk analysis, and exposure management to prioritize critical threats.
Meta Ordered to Pay $942M Over Facebook and Instagram Harm to Children
A New Mexico court ordered Meta to pay $942 million after finding Facebook and Instagram contributed to youth mental health harms and child sexual exploitation.
What Better Security Assurance Means for Threat Detection Success
Threat detection rarely fails because organizations lack tools. In many environments, cybersecurity teams already have endpoint protection, cloud…
Canadian Hacker “Waifu” Pleads Guilty to Stealing Data from Over 165 Organizations
Connor Riley Moucka, aka Waifu, admits breaching over 165 organizations, stealing billions of records and advertising the data on BreachForums, XSS.is and Exploit.in.