Phishing Attacks Just Got a Whole Lot Smarter – And It’s Up to MSPs to Catch Them Cybersecurity professionals have long warned about the dangers of phishing emails, but recent advancements in artificial intelligence (AI) have made these attacks more convincing and harder to detect than ever. Managed Service Providers (MSPs), who are often responsible … Read more
A Critical Elementor Pro Bug Exposes WordPress Sites to Remote Code Execution Attacks A severe vulnerability in the popular Elementor Pro plugin for WordPress has been uncovered, putting millions of websites at risk of remote code execution attacks. The flaw, identified as CVE-2026-32475, affects all versions of Elementor Pro prior to 4.2.2 and could allow … Read more
A devastating supply-chain attack has compromised the popular Rust crate arrayref, allowing hackers to push infostealer malware onto developers’ systems during compilation. The malicious code was injected into the crate by an attacker who had access to the maintainer’s account and exploited a vulnerability in the package management system. The attack, which occurred on August … Read more
A sophisticated attack campaign has been uncovered, with suspected Russian hackers exploiting a combination of Google’s OAuth authentication system and WhatsApp’s linking feature to gain unauthorized access to multiple high-profile targets. This brazen hacking operation not only highlights the vulnerabilities in our increasingly interconnected online lives but also underscores the importance of robust security measures. … Read more
A Supply Chain Hack Has Injected Malware into a Crucial Rust Package, Potentially Affecting Millions of Developers and Users A malicious actor has successfully infiltrated the supply chain of one of the most widely-used libraries in the Rust programming language, injecting malware that can compromise systems during the build process. The affected library, called “crates.io”, … Read more
Malicious Firefox Extensions Pose as Web3 Products, Steal Wallet Secrets from Thousands of Users A recent investigation has uncovered a sophisticated threat campaign targeting users of the popular web browser Mozilla Firefox. At least 40 malicious extensions, masquerading as legitimate Web3 products, have been found to be secretly stealing sensitive wallet secrets and other user … Read more
A devastating new wave of Android banking attacks is sweeping the globe, as two sophisticated malware strains – ToxicPanda 2.0 and GoldDigger – have been spotted exploiting vulnerabilities in mobile devices to facilitate on-device fraud. The malicious software has already infected thousands of users worldwide, compromising their financial data and putting them at risk of … Read more
A Critical Flaw in NASA’s System Exposes Spacecraft to Potential Hacking NASA has recently disclosed a serious vulnerability in its Automated Interface Test (AIT)-GUI, a system used for testing and validating spacecraft commands. The flaw, which affects multiple missions, could allow unauthenticated attackers to issue commands to the spacecraft, raising concerns about the security of … Read more
A sophisticated hacking campaign, allegedly linked to Russian threat actors, has been exploiting a previously unknown vulnerability in Google’s OAuth authentication system to hijack user accounts on multiple platforms. The hackers are also using WhatsApp’s link-sharing feature to gain unauthorized access to sensitive information, leaving thousands of users vulnerable to identity theft and data breaches. … Read more
A Devastating Supply Chain Attack Hits Rust Developers, Exposing Millions of Users to Build-Time Malware A sophisticated attack on the Rust programming language’s supply chain has compromised hundreds of crates, leaving millions of users vulnerable to build-time malware. The attackers exploited a vulnerability in the `cargo` package manager, injecting malicious code into popular libraries used … Read more