This marks the third malware-laced game to appear on Steam in just six months. A hacker group operating under the alias EncryptHub, also known as Larva-208, has embedded malicious software into a Steam-distributed game—turning a survival crafting title into a silent delivery mechanism for spyware. The Target: Chemia by
A new variant of the Coyote banking Trojan is actively exploiting Windows accessibility features—specifically, the Microsoft UI Automation (UIA) framework—to detect when users visit banking or cryptocurrency exchange websites and steal their login credentials. How Microsoft UI Automation Is Being Abused Microsoft UIA is an accessibility framework designed
The alleged administrator of the Russian-language cybercrime forum XSS[.]is has been arrested by Ukrainian authorities at the request of the Paris Prosecutor’s Office. The arrest was followed by a law enforcement takedown of the website, confirming what many in the cybercrime community had feared: the forum had been
A hacker infiltrated Amazon's AI assistant, Q, embedding instructions that would wipe user data from local machines and cloud environments. Even more concerning: Amazon unknowingly shipped the compromised version in a public release. What Is Amazon Q? Amazon Q is an AI-powered coding assistant for developers and IT
Brave Software has announced that its browser now blocks Microsoft’s Windows Recall feature by default—preventing the operating system from capturing screenshots of Brave windows and reinforcing its core mission of user privacy. What Is Windows Recall? First introduced by Microsoft in May 2024, Recall is an AI-powered feature
Multiple Chinese state-backed hacking groups are actively exploiting a chain of zero-day vulnerabilities in Microsoft SharePoint, according to cybersecurity researchers. Alarmingly, the attackers have reportedly compromised the network of the U.S. National Nuclear Security Administration (NNSA). ToolShell Exploit Chain: From Pwn2Own to Real-World Attacks The exploit chain—dubbed ToolShell—
Dr. Web researchers have discovered a stealthy new malware family, Trojan.Scavenger, designed to steal data from cryptocurrency wallets (MetaMask, Phantom, Slush, Exodus) and password managers (Bitwarden, LastPass). The malware targets Windows users and abuses a known technique: DLL Search Order Hijacking, where malicious files are loaded in place of
The extortion group World Leaks claimed to have breached Dell’s systems and stolen 1.3 TB of sensitive information—but Dell confirmed the attackers only accessed synthetic data from a demo environment, rendering the theft meaningless. What Happened? World Leaks infiltrated Dell’s Customer Solution Centers, a sandboxed platform
Cyber threat analysts at F6 have uncovered and helped dismantle a large domain network operated by NyashTeam, a Malware-as-a-Service (MaaS) group that provides malicious tools and hosting infrastructure to cybercriminals. The group’s services have facilitated attacks in over 50 countries, including Russia, and have now been significantly disrupted following
Security researchers at Wiz have uncovered a critical flaw in the NVIDIA Container Toolkit, warning that it poses a significant threat to GPU-accelerated workloads across managed cloud AI platforms. The vulnerability—dubbed NvidiaScape and tracked as CVE-2025-23266 (CVSS score: 9.0)—was first demonstrated by the Wiz team at the
The Model Context Protocol is a game-changer — no doubt about it. It makes AI smarter, more capable, and more useful than ever. But with that power comes risk. Big risk. MCP doesn’t just connect models to tools. It connects them to everything: your data, your systems, your workflows, your
All these risks might sound overwhelming — and they are. But that doesn’t mean you’re defenseless. The best defense is knowing how these attacks work and setting guardrails before bad actors get creative. Here’s a field-tested list of security practices for anyone building with the Model Context Protocol: