Security researchers at Human Security have uncovered a massive ad fraud operation dubbed IconAds, involving 352 malicious Android apps previously available on the Google Play Store. At its peak, the campaign generated over 1.2 billion ad requests per day, primarily targeting users in Brazil, Mexico, and the United States.
Cybersecurity analysts at Netcraft have uncovered a troubling trend: AI chatbots frequently generate incorrect or misleading URLs when asked to provide official website links for major brands. According to researchers, this flaw opens a dangerous new vector for phishing and domain hijacking attacks. Key Findings from Netcraft’s Study The
A hacker is threatening to release 106 GB of data allegedly stolen from Spanish telecommunications giant Telefónica, though the company firmly denies any recent breach or data compromise. The threat actor, operating under the alias “Rey,” claims the intrusion occurred on May 30, during which over 12 hours of data
Cybersecurity researchers at Cofense report a dramatic rise in phishing campaigns leveraging .es domains, which are officially reserved for Spanish-language websites or entities based in Spain. The use of these domains by cybercriminals has surged 19-fold since the beginning of 2025, making .es the third most exploited top-level domain (TLD)
Two vulnerabilities have been discovered in the widely used sudo utility, enabling local attackers to escalate privileges to root on affected Linux systems. The flaws—identified by security researchers at Stratascale—include a newly discovered 12-year-old bug. One of the vulnerabilities (CVE-2025-32462) has existed in the sudo codebase since 2013,
A security researcher has uncovered a critical vulnerability in the Android spyware app Catwatchful, marketed as a parental control tool. The flaw exposed sensitive data belonging to over 62,000 users, including plain-text email addresses and passwords. Although positioned as a monitoring solution, Catwatchful fits the classic definition of stalkerware—
Microsoft is advising users to disregard Windows Firewall error messages that may appear after installing the June 2025 non-security preview update for Windows 11. The issue, which affects only select systems running the 24H2 build, has been linked to a feature still under development. What’s Happening? After installing KB5060829,
Thoughts, stories and ideas.
In a surprising move, the Ransomware-as-a-Service (RaaS) group Hunters International has announced that it is shutting down operations and releasing free decryption tools to help victims recover encrypted data—without paying a ransom. Key Announcements from Hunters International The group posted an official statement on its dark web leak site,
Alexander Zhurnakov, a researcher at Positive Technologies, has played a key role in identifying and helping patch a high-severity vulnerability in the open-source Math library, which is used for rendering mathematical formulas in documents. The vulnerability also affected PHPWord, a widely used PHP library for reading and generating text documents,
Security researchers have uncovered more than 40 malicious browser extensions on the official Firefox Add-ons Store, all disguised as legitimate cryptocurrency wallets. These fraudulent extensions were designed to steal users’ private keys, seed phrases, and sensitive wallet data, exposing victims to full asset compromise. Key Findings Fake Wallet Extensions The
A severe vulnerability has been discovered in the popular WordPress plugin Forminator, enabling attackers to delete arbitrary files from a site’s server—potentially resulting in a full site takeover. The flaw affects all versions up to 1.44.2 and places hundreds of thousands of websites at immediate risk.
Microsoft has announced a major security update to its cloud-based protection platform, Defender for Office 365. The new feature will automatically detect and block email bombing attacks, a growing tactic used by threat actors to overwhelm inboxes and obscure real threats. What Is Defender for Office 365? Formerly known as
In a bizarre and troubling incident, pirate IPTV services were promoted via Eurostat’s official website, raising questions about platform security and how easily AI systems can be misled. Eurostat, the European Union’s statistical office, is closely tied to the European Commission—making the scam especially jarring. A Sophisticated
Researchers at Okta have uncovered a disturbing new trend: unknown threat actors are abusing Vercel’s generative AI tool, v0, to create fraudulent webpages that mimic legitimate login portals—part of a broader campaign to scale phishing attacks using generative AI. What Is v0 and How It’s Being Misused
The U.S. Department of the Treasury has imposed sanctions on Aeza Group, a Russian-based “bulletproof” hosting provider, along with four of its top operators. According to U.S. officials, Aeza’s infrastructure was actively used by ransomware gangs, information-stealing malware operators, and darknet marketplaces. Allegations and Sanctions The sanctions
Spanish police have arrested five suspects accused of laundering more than $540 million through fraudulent cryptocurrency investment schemes that defrauded over 5,000 victims worldwide. The case, supported by Europol and law enforcement agencies in Estonia, France, and the United States, highlights the growing scale and sophistication of crypto-enabled financial
Cloudflare has announced a major policy shift, automatically blocking AI-powered web scraping for new users and launching a beta program that lets website owners charge AI companies for access to their content. Key Announcements Default AI Crawler Blocking Cloudflare will now block known AI bots by default for all new
The International Criminal Court (ICC) has confirmed it is investigating a "sophisticated" cyberattack that targeted its internal systems last week. The breach has raised fresh concerns about the vulnerability of global justice institutions to cyber threats. Key Details The ICC described the incident as both “complex and targeted,
German regulators have formally ordered Google and Apple to remove the DeepSeek app from their platforms, citing serious violations of EU data protection laws. The directive was issued by Berlin’s Data Protection Commissioner, Meike Kamp, who argues that the Chinese-owned AI app fails to comply with the General Data