Category: Research
Brave Adds Disposable Email Aliases to Cut Cross-Site Tracking
Brave 1.94 introduces Email Aliases, letting users generate forwarding addresses that hide their real inbox from websites and limit exposure after data…
Attackers Turn npm Mirrors Into Free Hosting for Phishing Redirects
Threat actors are uploading npm packages that contain nothing but a fake Cloudflare verification page, letting mirrors like UNPKG and npmmirror serve…
Former NSA Director Paul Nakasone Launches National Security Advisory Firm
Retired General Paul Nakasone, who led the NSA and U.S. Cyber Command until 2024, has founded the Nakasone Group to advise governments,…
Truffle Security Finds Thousands of Live AWS Keys Exposed Across Public Repos
A four-year sweep by Truffle Security uncovered over 9,300 still-valid AWS access keys, including hundreds tied to corporate accounts with full administrative…
Windows Named Pipes: A Trusted-Looking Interface That Often Isn’t
Security researchers warn that Windows named pipes, widely used for local interprocess communication, are frequently misconfigured in ways that let unprivileged or…
Supply-Chain Malware Turns Android Car Head Units Into Proxy Botnet Nodes
Kaspersky links the MoYu group, previously tied to BadBox, to a new infection chain hijacking DoFun automotive head units for ad fraud…
TikTok to Pay $400 Million Settling US Child Privacy Lawsuit
The Justice Department says ByteDance-owned TikTok will pay $400 million to resolve a 2024 lawsuit alleging violations of federal child privacy protections,…
Three Banking Trojans, Three Continents: Manic, Grandoreiro, and ToxicPanda 2.0 Escalate
Researchers this week detailed three distinct banking trojan campaigns, ranging from a new Android threat hitting Ukraine to an updated Grandoreiro variant…
14 Trojanized npm Packages Deliver AI-Powered RedC2 4.0 Linux Backdoor
Researchers found npm packages posing as calendar and streak-tracking utilities that quietly drop an AI-assisted Linux implant called RedC2 4.0 onto developer…
Democrats Ask GAO to Probe Fallout From CISA Staffing Cuts
House lawmakers want the Government Accountability Office to examine how losing nearly a third of CISA's workforce has affected the agency's ability…
Defense Contractors More Confident in CMMC Scores, Less Able to Prove Them
Two new surveys of the defense industrial base show rising self-attested SPRS scores and rising confidence, but a shrinking share of contractors…
New Manic Android Malware Relays Stolen Data Through Nearby Infected Phones
A newly documented Android trojan called Manic combines banking fraud, spyware, and remote control, and can bounce stolen data between nearby infected…