Cyber Security News, Privacy Research, AI Threats

Threats

North Korean hackers weaponise VS Code tasks.json to steal credentials from developers

Open a project folder in VS Code, click "Trust," and North Korean malware executes instantly. Sophos documents how NICKEL ALLEY weaponised tasks.json to target crypto …

Menu

Latest

Editors' Choice

Popular

Deep web and Tor in 2026: how the hidden internet actually works

DarkSword iOS exploit chain hits four countries with six flaws and three zero-days

Best Linux Distros for Ethical Hacking in 2026: Which One Should You Choose?

March 23, 2026 vulnerability digest: Oracle emergency patch, Windchill CVSS 10 zero-day

RuView turns Wi-Fi signals into through-wall body tracking for $54 in hardware

General

Google paid $17.1 million in bug bounties in 2025, an all-time VRP record

Eight tech companies sign anti-fraud accord as global scam losses top $1 trillion

White House cyber strategy shifts to offensive operations and lighter regulation

Threats

North Korean hackers weaponise VS Code tasks.json to steal credentials from developers

March 25, 2026 vulnerability digest: Apple sandbox escapes, Cisco IOS XE bundle

NetScaler memory overread CVE-2026-3055 mirrors CitrixBleed, exploitation imminent

TeamPCP backdoors LiteLLM on PyPI using stolen Trivy credentials, 97M downloads exposed

Chrome 146 update patches eight high-severity flaws in WebGPU, WebGL, Fonts, and FedCM

Incidents

Crunchyroll breached through Telus Digital outsourcer, 100 GB of data reportedly stolen

Contractor extorted Siemens subsidiary Brightly Software for $2.5 million in crypto

Companies House flaw exposed five million UK firms' private data for five months

Spain's Ministry of Finance employee data leaked with IDs, IBANs, and contact details

Velvet Tempest deploys CastleRAT via ClickFix in Termite ransomware staging

AI news

CVE-2026-26144: Excel XSS turns Copilot Agent into zero-click exfiltration tool

Tennessee grandmother jailed six months after AI facial recognition error

LLMs unmask anonymous internet users for $4 per person, ETH Zurich study finds

Grok's Paywall: How Musk Monetized the Problem Instead of Fixing It

Crypto

Wife allegedly used home CCTV to steal $172 million in Bitcoin from husband's Trezor

AppsFlyer Web SDK hijacked in supply chain attack that swapped crypto wallet addresses

Cybercrime

Russian hacker gets 7 years, ransomware negotiator charged for attacking own clients

FBI seizes four Handala Hack domains, MOIS-linked group launches replacement within hours

Super Micro co-founder charged with smuggling $2.5 billion in Nvidia AI servers to China

Operation Lightning dismantles SocksEscort botnet that hijacked 369,000 devices worldwide

FBI investigates seven Steam games laced with malware that drained crypto wallets

Gadgets

Three Xiaomi camera flaws chain into Wi-Fi RCE with full exploit code published on GitHub

Android 17 blocks non-accessibility apps from the AccessibilityService API

Hacker tricks Sony into permanently banning the top PlayStation trophy collector

MediaTek chip flaw lets attackers extract PINs and crypto seeds in 45 seconds

Tech

FCC bans all new foreign-made consumer routers, cites Volt and Salt Typhoon campaigns

GrapheneOS refuses age verification, will exit markets rather than collect user data

Essex Police suspends facial recognition after Cambridge study confirms racial bias

Firefox 149 adds free VPN with 50 GB limit, but it only covers browser traffic

Tools

Win11Debloat: Free PowerShell Script That Removes Copilot, Telemetry, and Bloatware from Windows 10/11

Best Linux Distros for Ethical Hacking in 2026: Which One Should You Choose?

Privacy

Deep web and Tor in 2026: how the hidden internet actually works

The digital footprint myth: why you cannot delete everything, and what works in 2026

Security

Blackbox AI VS Code Extension Gives Attackers Root Access Through Hidden Prompt in an Image

Stay informed on cybersecurity