Study of 281 Free Android VPN Apps Reveals Traffic Leaks, Unencrypted Data, and Tracking
A comprehensive study of 281 popular free Android VPN apps from the Google Play Store, conducted by researchers at the University of…
Tag: CVE-2026-55200
Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites
A cybercrime crew left its server exposed for three weeks, revealing the inner workings of a mass site-hacking operation tracked as WP-SHELLSTORM.…
Ransomware Negotiator Sentenced to 70 Months for Aiding BlackCat Attacks
A 41-year-old former ransomware negotiator, Angelo Martino, has been sentenced to 70 months in prison for conspiring with the now-defunct BlackCat ransomware…
Attackers Exploit ‘Ill Bloom’ Vulnerability to Drain $3.1 Million From Cryptocurrency Wallets
Security firm Coinspect has disclosed a crypto wallet flaw called 'Ill Bloom' that is being actively exploited by attackers. The vulnerability stems…
GigaWiper: New Windows Backdoor Combines Disk Wiping, Fake Ransomware, and Spyware
Microsoft has dismantled a destructive Windows backdoor named GigaWiper, which combines three older malicious tools into a single platform. The malware, written…
Dormant GitHub ‘Ghost’ Accounts Used in Coordinated Reconnaissance Campaigns
Datadog Security Labs has uncovered several overlapping campaigns that leverage dormant GitHub accounts—some created two to five years ago—to systematically enumerate corporate…
npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk
GitHub has officially released npm version 12, introducing significant security changes to reduce software supply chain risks. The most notable change is…
Outpacing Mythos: Zscaler Webinar on Zero Trust Defense Against AI-Powered Attacks
AI-powered attacks now move at machine speed, compressing days of work into minutes. Attackers using models like Mythos can craft tailored bait,…
GodDamn Ransomware Deploys PoisonX Driver to Bypass Endpoint Security
Cybersecurity researchers have identified a new ransomware family named GodDamn, which leverages the PoisonX kernel driver to disable endpoint defenses. First observed…
Microsoft Patches RoguePlanet Defender Privilege Escalation Flaw (CVE-2026-50656)
Microsoft has released security updates to address a critical privilege escalation vulnerability in its Microsoft Malware Protection Engine, tracked as CVE-2026-50656 (CVSS…