Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Herodotus Android Banking Trojan Evades Behavioral Biometrics with Human‑Like Input
ThreatFabric has profiled a new Android banking trojan dubbed Herodotus that targets users in Italy and Brazil and is already ...
Atroposia Malware-as-a-Service: Modular RAT Adds Hidden RDP, Stealth Exfiltration, and DNS Hijacking for $200/Month
Varonis researchers report the emergence of Atroposia, a malware‑as‑a‑service (MaaS) platform marketed at $200 per month. Subscribers gain access to ...
LastPass warns of emergency access phishing as attackers pivot to passkeys
Developers of LastPass have alerted users to a large-scale phishing operation that began in mid‑October 2025. The campaign impersonates “emergency ...
Dante Spyware Linked to Memento Labs Spotted in Real-World APT Using Chrome Zero‑Day
Kaspersky researchers have reported the first confirmed in-the-wild deployment of the commercial surveillance platform Dante, attributed to Memento Labs (formerly ...
ISC fixes BIND 9 resolver flaws enabling DNS cache poisoning and DoS
Internet Systems Consortium (ISC) has released security updates for BIND 9 that remediate three significant vulnerabilities in the recursive resolver. ...
Google Refutes “Gmail Breach”: Synthient’s 183M Credentials Come from Infostealers and Old Leaks
Reports claiming “183 million Gmail accounts were hacked” triggered widespread concern, but Google has confirmed no compromise of Gmail’s infrastructure ...
Leaked Cellebrite Briefing: GrapheneOS Significantly Hardens Google Pixel Against Mobile Forensics
A leaked set of slides from a closed Cellebrite briefing, shared on the GrapheneOS forums by an anonymous user known ...
“AI Sidebar Spoofing” Exposes Agentic AI Browsers to UI Hijacking: Risks for ChatGPT Atlas and Perplexity Comet
Researchers at SquareX have detailed a new attack surface for agentic AI browsers—AI Sidebar Spoofing—that lets malicious browser extensions overlay ...
YouTube Ghost Network: 3,000+ Malicious Videos Removed as Infostealer Campaign Surges
Google has taken down more than 3,000 videos linked to the so‑called YouTube Ghost Network, a sprawling malware distribution operation ...
ChatGPT Atlas Omnibox Vulnerability: Prompt Injection via Pseudo‑URLs
Security researchers at NeuralTrust have disclosed an intent‑spoofing weakness in the ChatGPT Atlas agent browser. The issue stems from the ...
