A security researcher has uncovered a critical vulnerability in the Android spyware app Catwatchful, marketed as a parental control tool. The flaw exposed sensitive data belonging to over 62,000 users, including plain-text email addresses and passwords. Although positioned as a monitoring solution, Catwatchful fits the classic definition of stalkerware—
Microsoft is advising users to disregard Windows Firewall error messages that may appear after installing the June 2025 non-security preview update for Windows 11. The issue, which affects only select systems running the 24H2 build, has been linked to a feature still under development. What’s Happening? After installing KB5060829,
In a surprising move, the Ransomware-as-a-Service (RaaS) group Hunters International has announced that it is shutting down operations and releasing free decryption tools to help victims recover encrypted data—without paying a ransom. Key Announcements from Hunters International The group posted an official statement on its dark web leak site,
Alexander Zhurnakov, a researcher at Positive Technologies, has played a key role in identifying and helping patch a high-severity vulnerability in the open-source Math library, which is used for rendering mathematical formulas in documents. The vulnerability also affected PHPWord, a widely used PHP library for reading and generating text documents,
Security researchers have uncovered more than 40 malicious browser extensions on the official Firefox Add-ons Store, all disguised as legitimate cryptocurrency wallets. These fraudulent extensions were designed to steal users’ private keys, seed phrases, and sensitive wallet data, exposing victims to full asset compromise. Key Findings Fake Wallet Extensions The
A severe vulnerability has been discovered in the popular WordPress plugin Forminator, enabling attackers to delete arbitrary files from a site’s server—potentially resulting in a full site takeover. The flaw affects all versions up to 1.44.2 and places hundreds of thousands of websites at immediate risk.
Microsoft has announced a major security update to its cloud-based protection platform, Defender for Office 365. The new feature will automatically detect and block email bombing attacks, a growing tactic used by threat actors to overwhelm inboxes and obscure real threats. What Is Defender for Office 365? Formerly known as
In a bizarre and troubling incident, pirate IPTV services were promoted via Eurostat’s official website, raising questions about platform security and how easily AI systems can be misled. Eurostat, the European Union’s statistical office, is closely tied to the European Commission—making the scam especially jarring. A Sophisticated
Researchers at Okta have uncovered a disturbing new trend: unknown threat actors are abusing Vercel’s generative AI tool, v0, to create fraudulent webpages that mimic legitimate login portals—part of a broader campaign to scale phishing attacks using generative AI. What Is v0 and How It’s Being Misused
The U.S. Department of the Treasury has imposed sanctions on Aeza Group, a Russian-based “bulletproof” hosting provider, along with four of its top operators. According to U.S. officials, Aeza’s infrastructure was actively used by ransomware gangs, information-stealing malware operators, and darknet marketplaces. Allegations and Sanctions The sanctions
Spanish police have arrested five suspects accused of laundering more than $540 million through fraudulent cryptocurrency investment schemes that defrauded over 5,000 victims worldwide. The case, supported by Europol and law enforcement agencies in Estonia, France, and the United States, highlights the growing scale and sophistication of crypto-enabled financial
Cloudflare has announced a major policy shift, automatically blocking AI-powered web scraping for new users and launching a beta program that lets website owners charge AI companies for access to their content. Key Announcements Default AI Crawler Blocking Cloudflare will now block known AI bots by default for all new