Verinu

Cybersecurity

Lazarus Uses ML-KEM-1024 to Protect Malware Delivery

Kaspersky says the North Korean hacking group Lazarus has added post-quantum encryption to a malware delivery tool used in a campaign targeting South Korean organizations. In its analysis of Operation FlashHole, Kaspersk

menu_book2 min read visibility1 reads history3 days ago linkTechRadar share

Cybersecurity

Binance investigates potential $5.8 billion crypto theft

Binance says it is investigating reports of a potential security breach involving digital assets. The exchange has not confirmed whether any transfers were unauthorized, how the suspected breach occurred, or whether asse

menu_book2 min read visibility1 reads history3 days ago linkBleepingComputer share

Cybersecurity

Hugging Face malware campaign returns to mine cryptocurrency on GPUs

A malware campaign targeting Hugging Face model repositories returned within days of its first takedown, according to security researchers at Pluto Security. The researchers found 31 malicious repositories across seven a

menu_book2 min read visibility1 reads history3 days ago linkBleepingComputer share

Cybersecurity

Japan Airlines says Amadeus breach exposed data of about 92,000 customers

Japan Airlines (JAL) says a breach at Amadeus’s Passenger Service System exposed information linked to about 92,000 customers. JAL Group uses the system for reservations, ticketing and check-in for JAL and Japan Transoce

menu_book1 min read visibility1 reads history3 days ago linkBleepingComputer share

Cybersecurity

Study Finds Gaps in Oversight of AI Security Actions

A study by Illumio says organizations are handing decisions once made by people to AI, including decisions involving user permissions and sensitive data. Its findings point to gaps between the limits organizations believ

menu_book1 min read visibility1 reads history3 days ago linkTechRadar share

Cybersecurity

Hackers use Cisco SD-WAN flaw to deploy KeyDrift malware

A threat group tracked as UAT-11473 exploited CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy KeyDrift, a custom malware framework, Cisco Talos researchers reported. The rese

menu_book2 min read visibility1 reads history3 days ago linkBleepingComputer share

Cybersecurity

Fake AI apps spread Yoba malware that installs a Monero miner

A cybercrime campaign is using fake downloadable apps for GPT-5.6 Sol, GPT-6 Astra and Claude Opus to distribute malware, according to Check Point Research (CPR). The apps are hosted on GitHub and promoted through…

menu_book2 min read visibility1 reads history3 days ago linkTechRadar share

Cybersecurity

Hackers Exploit Camera Management Software to Enter Company Networks

Security researchers say attackers have used camera management software to gain initial access to company systems. Huntress researchers Harlan Carvey and Lindsey O'Donnell-Welch observed a “handful of incidents” in Septe

menu_book2 min read visibility1 reads history4 days ago linkTechRadar share

Cybersecurity

Chrome extensions with 13.4 million installs caught hijacking searches

A report from Socket describes 319 Chrome extensions with a combined 13.4 million reported installations that redirected users’ searches through tracking servers to generate advertising revenue from Bing and Yahoo. Resea

menu_book2 min read visibility1 reads history4 days ago linkBleepingComputer share

Cybersecurity

Three Ways AI Agents Operate in Browsers

AI agents can already work inside authenticated browsers, where their actions may be difficult to distinguish from those of employees. A report by Keep Aware, a Jamf company, describes three ways agents operate and…

menu_book2 min read visibility1 reads history4 days ago linkBleepingComputer share

Cybersecurity

FBI-led operation seizes Virtualine hosting service

The FBI says it seized the website of Virtualine, a bulletproof hosting service that allegedly supported criminal activity, including laundering stolen and extorted cryptocurrency. The operation involved German and Dutch

menu_book2 min read visibility1 reads history4 days ago linkTechRadar share

Cybersecurity

CISA warns Fragnesia is being chained in PHP2Shell attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Linux kernel flaw known as Fragnesia to its Known Exploited Vulnerabilities (KEV) Catalog, warning that attackers are chaining it with PHP2Shel

menu_book2 min read visibility1 reads history4 days ago linkBleepingComputer share