https://www.macrumors.com/2025/02/06/apple-removed-screen-reading-malware-apps Apple has removed 11 iOS apps from the App Store after they were found to contain malicious code designed to steal sensitive information from users’ devices. Security firm Kaspersky...
OpenAI Data Breach – Threat Actor Allegedly Claims 20 Million Logins for Sale A concerning claim has emerged on dark web forums, alleging the theft and subsequent sale of over 20 million OpenAI user login credentials. The anonymous threat actor, who posted the...
https://www.sbs.com.au/news/article/chinese-ai-app-deepseek-banned-on-all-australian-government-devices/lm9udv4et The Australian government has banned the use of the Chinese AI chatbot DeepSeek on all government-issued devices, citing national security concerns. This...
https://krebsonsecurity.com/2025/01/infrastructure-laundering-blending-in-with-the-cloud A new report reveals how Chinese cybercrime groups are exploiting major U.S. cloud providers like Amazon and Microsoft to launder their malicious activities. This technique,...
https://vulncheck.com/blog/2024-exploitation-trends A new report from VulnCheck reveals a significant increase in the number of vulnerabilities exploited in the wild in 2024. The report found that 768 vulnerabilities with designated CVEs were exploited in 2024, a 20%...
https://security.googleblog.com/2025/01/how-we-kept-google-play-android-app-ecosystem-safe-2024.html Google blocked a record-breaking 2.36 million Android app submissions to the Play Store in 2024 due to policy violations. This surge in blocked apps is attributed to...
https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak DeepSeek, a Chinese AI startup, has suffered a significant data breach, exposing sensitive user data and internal information. Two publicly accessible databases containing over a million log...
Let’s be honest – most security training is boring. Really boring. Annual compliance videos, outdated slideshows, generic best practices that don’t apply to your tech stack. No wonder developers tune out. But it doesn’t have to be this way. THE...
https://blog.pypi.org/posts/2025-01-30-archival The Python Package Index (PyPI) has implemented a new “Project Archiving” feature to enhance the security and transparency of the open-source ecosystem. This feature allows project maintainers to officially...
https://gist.github.com/zachlatta/f86317493654b550c689dc6509973aa4 Google is fortifying its security measures following a recent, elaborate voice phishing attack documented by programmer Zach Latta. Latta, founder of Hack Club, detailed a close call he had with...