Errors are annoying; they cause unexpected behaviors and sometimes expose sensitive information if they are not handled well. In the second chapter of Secure Coding 101, we will explore effective error handling techniques and the importance of logging security events…
Cybersecurity experts raise alarms about a new malware campaign that exploits cracked software to spread information stealers, specifically Lumma and ACR Stealer. The AhnLab Security Intelligence Center (ASEC) reports a significant increase in ACR Stealer distribution since January 2025. Dead…
Cryptocurrency exchange Bybit announced on Friday that it fell victim to a “sophisticated” cyberattack, resulting in the theft of over $1.46 billion worth of cryptocurrency from one of its Ethereum cold (offline) wallets. This incident marks the largest single crypto…
Apple has announced the immediate removal of its Advanced Data Protection (ADP) feature for iCloud in the United Kingdom. This decision follows government demands for backdoor access to encrypted user data. Bloomberg first reported this significant development. What is Advanced…
Russian threat actors have launched sophisticated phishing campaigns that exploit the legitimate “Linked Devices” feature in the Signal messaging app. These attacks aim to gain unauthorized access to accounts of interest, particularly targeting individuals associated with military and governmental operations.…
A new variant of the Snake Keylogger malware actively targets Windows users in China, Turkey, Indonesia, Taiwan, and Spain. According to Fortinet FortiGuard Labs, this version has caused over 280 million blocked infection attempts globally since the start of the…
Recent findings from the Qualys Threat Research Unit (TRU) have unveiled two significant security vulnerabilities in the OpenSSH suite, a widely used tool for secure networking. These flaws, if exploited, could lead to serious security breaches, including man-in-the-middle (MitM) attacks…
In a recent security audit, significant vulnerabilities were uncovered in SimpleHelp, a remote support software that has been gaining popularity among users. Conducted by Horizon3, the audit revealed three critical security flaws that could potentially compromise both SimpleHelp servers and…
The free-to-play game PirateFi, available on the Steam store, distributes the Vidar infostealing malware to unsuspecting players. The game was live on the platform for nearly a week, from February 6th to February 12th, and approximately 1,500 users downloaded it.…
Microsoft has unveiled a new variant of the notorious XCSSET macOS malware, marking its first major update since 2022. This latest iteration showcases advanced obfuscation tactics, enhanced persistence mechanisms, and innovative infection strategies, posing a heightened threat to macOS users.…