5+ day, 15+ hour ago   (391+ words) Microsoft has released its September 2026 security updates, fixing two Windows elevation-of-privilege vulnerabilities that attackers are already exploiting in the wild. The company’s broader Patch Tuesday release addresses 974 CVEs across its products, including 723 affecting Windows. The two actively exploited flaws are…...

1+ week, 6+ day ago   (259+ words) RevStealer malware is being distributed through trojanized Electron applications, including a GitHub project masquerading as a free desktop version of Anthropic’s Claude Opus 5. The malware steals browser data, password-manager files, cryptocurrency wallets, credentials, and documents while using multiple techniques to…...

2+ week, 2+ day ago   (459+ words) The ShinyHunters threat group claims it compromised McKesson and obtained data on over 284 million patient records, including highly sensitive medical, identity, prescription, and healthcare provider information. CyberInsider reviewed samples privately provided by the threat actor that appear consistent with the…...

3+ week, 1+ hour ago   (404+ words) ReliaQuest says it contained a social engineering attack that briefly gave a threat actor access to a single employee identity session but did not allow access to company applications, systems, or customer data. The attacker was not identified in the…...

3+ week, 3+ day ago   (333+ words) Android malware is spreading through the built-in firmware update mechanism of automotive head units, turning the devices into nodes for ad fraud and a residential proxy botnet. Kaspersky reports this is the first documented malware campaign with an infection chain…...

3+ week, 3+ day ago   (324+ words) A new malware family dubbed SynkLoader uses a fake Windows lock screen to steal users’ login passwords before giving attackers remote access to corporate networks. The modular malware combines Python, PowerShell, C#, and C++ components, with many payloads executed only…...