Cybersecurity & Privacy

Safety, VPNs, scams

openai.jpg

OpenAI rotates macOS certs after Axios assault hit code-signing workflow

OpenAI is rotating doubtlessly uncovered macOS code-signing certificate after a GitHub Movements workflow completed a malicious Axios bundle all over a up to date provide chain assault. The corporate stated that on March 31, 2026, the official workflow downloaded and completed a compromised Axios bundle (model 1.14.1) that was once utilized in assaults to deploy […]

OpenAI rotates macOS certs after Axios assault hit code-signing workflow Read More »

cve 2025 50165 windows imaging component vulnerability.jpg

A essential flaw in Home windows Imaging Element

ESET researchers tested CVE‑2025‑50165, a major Home windows vulnerability described to grant far flung code execution through simply opening a specifically crafted JPG record – one of the vital extensively used picture codecs. The flaw, discovered and documented through Zscaler ThreatLabz, piqued our hobby, as Microsoft assessed its severity as essential however deemed its exploitability

A essential flaw in Home windows Imaging Element Read More »

adobe.jpg

Adobe rolls out emergency repair for Acrobat, Reader zero-day flaw

Adobe has launched an emergency safety replace for Acrobat Reader to mend a vulnerability, tracked as CVE-2026-34621, that has been exploited in zero-day assaults since a minimum of December. The flaw permits malicious PDF information to avoid sandbox restrictions and invoke privileged JavaScript APIs, doubtlessly resulting in arbitrary code execution. The exploit seen in assaults permits studying and stealing

Adobe rolls out emergency repair for Acrobat, Reader zero-day flaw Read More »

storm cloud infostealer.jpg

New infostealer hijacks periods, decrypts server-side

A brand new infostealer known as Hurricane seemed on underground cybercrime networks in early 2026, representing a shift in how credential robbery is creating. For less than $1,000 a month, operators get a stealer that harvests browser credentials, consultation cookies, and crypto wallets, then quietly ships the entirety to the attacker’s server for decryption. To

New infostealer hijacks periods, decrypts server-side Read More »

dark web personal information data.jpg

Your knowledge is at the darkish internet. What occurs subsequent?

In case your knowledge is at the darkish internet, it’s most definitely just a topic of time earlier than it’s abused for fraud or account hijacking. Right here’s what to do. 13 Jan 2026  •  , 6 min. learn Opposite to widespread trust, a lot of the darkish internet isn’t the den of virtual iniquity

Your knowledge is at the darkish internet. What occurs subsequent? Read More »

internet verification.png

Is it time for web services and products to undertake identification verification?

Will have to verified identities transform the usual on-line? Australia’s social media ban for under-16s presentations why the query issues. 14 Jan 2026  •  , 5 min. learn New regulation in Australia makes it unlawful for the ones below 16 to have a social media account. To keep away from monetary consequences, social media corporations

Is it time for web services and products to undertake identification verification? Read More »

linkedin cyberattacks social engineering.png

Why LinkedIn is a looking floor for risk actors – and the way to offer protection to your self

The trade social networking website is an infinite, publicly out there database of company knowledge. Don’t imagine everybody at the website is who they are saying they’re. 16 Jan 2026  •  , 4 min. learn In November, Britain’s Safety Carrier started notifying individuals of parliament (MPs) and their workforce of an audacious international intelligence-gathering scheme.

Why LinkedIn is a looking floor for risk actors – and the way to offer protection to your self Read More »