282 iOS AI Apps Leak API Keys and OpenAI Proxy Access in Network Traffic Study
Researchers at Wake Forest University tested 444 AI chatbot apps for iPhone and found that 282 of them (nearly two-thirds) exposed paid…
Tag: Google
AirDrop and Quick Share Flaws Let Nearby Attackers Crash Devices and Bypass Security Checks
Researchers from the CISPA Helmholtz Center for Information Security have uncovered six security flaws in Apple's AirDrop and Google/Samsung's Quick Share wireless…
Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input
Microsoft has discovered a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people searched for.…
Microsoft Removes 119 Edge Extensions Hiding Malware in Images and Fonts
Microsoft has removed 119 malicious extensions from the Edge Add-ons store that used steganography to hide malware in image and font files.…
FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys
The FBI and CISA have updated their March warning about Russian intelligence phishing Signal accounts, adding a new tactic where attackers coax…
StrikeShark Campaign Uses Novel SharkLoader Malware to Deploy Cobalt Strike Beacon
A newly identified cyber attack campaign, tracked as StrikeShark by Kaspersky, is deploying a previously undocumented malware family called SharkLoader to deliver…
Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js Implant
Microsoft has issued a warning about an active phishing campaign targeting hotels and hospitality organizations across Europe and Asia since April 2026.…
Google Details Turla’s New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks
Google Threat Intelligence Group (GTIG) has attributed a previously undocumented .NET backdoor named STOCKSTAY to the Russian state-sponsored threat actor Turla. The…
CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog following reports…
Google Chrome V8 JavaScript Engine
The open-source JavaScript engine used in Google Chrome. Vulnerable to CVE-2026-11645.