Argamal: Malware hidden in hentai games - Kaspersky researchers analyze new Argamal RAT distributed via infected hentai games and allowing the attacker to control the target machine.
New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare - Cybersecurity researchers have discovered a remote denial-of-service exploit that affects major web servers, including NGINX, Apache HTTPD, Microsoft IIS, Envoy, and Cloudflare Pingora. The vulnerability has been codenamed HTTP/2 Bomb by Calif. "The vulnerable behavior exists in each server's default...
Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited - Google on Monday released patches for 124 security vulnerabilities impacting its Android operating system for the month of June 2026, including one high-severity flaw in the Framework component that has come under active exploitation. Tracked as CVE-2025-48595 (CVSS score: 8.4), the security flaw has...
Wardriving assessment across Mexico: Preparing for the 2026 World Cup - In the lead-up to the 2026 FIFA World Cup, Kaspersky GReAT experts conducted a wardriving assessment in Mexico City, Monterrey, and Guadalajara to evaluate Wi-Fi hotspot security configurations and potential exposure risks.
The U.S. sanctions Nobitex crypto exchange used by ransomware - The U.S. Treasury's Office of Foreign Assets Control (OFAC) has announced sanctions against Nobitex, Iran's largest cryptocurrency exchange, for facilitating payments related to terrorist activities.
Google DoubleClick Abused in New Malspam Campaign to Deliver DesckVB RAT - Cybersecurity researchers have flagged a new malspam campaign that makes use of Google's DoubleClick domain as a way to evade detection and ultimately deliver a remote access trojan (RAT) named DesckVB RAT . "Before the victim ever reaches attacker-controlled infrastructure, the lure routes through DoubleClick,...
Meta AI Hacked To Hijack Instagram Accounts - Facebook parent says it has resolved issue that allowed attackers to take control of Instagram accounts using its AI support chatbot
Secure Shadow AI at the Control Plane with Falcon for IT - CrowdStrike is introducing AI Discovery and Governance for CrowdStrike Falcon® for IT, a new capability that helps organizations identify, assess, and govern AI technologies across enterprise environm[…]
What 345 Days of Untested Exposure Looks Like at a Bank - A two-week penetration test can leave roughly 345 days of real-world exposure unvalidated. Sprocket Security explores why continuous testing is becoming critical as attack surfaces constantly change.
How to Stop AI-Driven Data Loss - AI is reshaping the modern workplace. From automating tasks to generating in-depth research in seconds, AI tools are enhancing productivity at a lightning pace. GenAI assistants, agentic browsers, and[…]
News alert: Halo Security recognized for helping MSPs manage customers’ external attack surfaces - MIAMI BEACH, Fla., June 2, 2026, CyberNewswire— Halo Security today announced that its attack surface management solution has been named a 2026 MSP Today Product of the Year Award winner by TMC, a leading global media company recognized for building communities in technology and business through live...
AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It. - AI-driven exploitation timelines are rapidly shrinking, and they are not going to stop shrinking. Vulnerabilities are being discovered, reproduced, and weaponized faster than ever in the history of enterprise security. As a result, the window between a vulnerability being disclosed and indiscriminate...
