Category Archives: Security & Privacy
ExpressKeys Password Manager Updated with Passkey Support
ExpressVPN has upgraded the ExpressKeys password manager with new passkey support, secure sharing features, and an independent security audit by Cure53. Continue reading
Custom Ransomware Campaign Impersonates Interpol to Target SMBs
A new phishing campaign targeting SMBs delivers custom ransomware disguised as Interpol evidence; security researchers have discovered a fatal flaw for decryption. Continue reading
JADEPUFFER: The First Documented Case of Agentic Ransomware
Sysdig researchers uncover JADEPUFFER, the first verified instance of agentic ransomware leveraging LLMs to autonomously execute a destructive cyberattack. Continue reading
Legacy Authentication Exploited in Massive Azure CLI Password Spray
Discover how threat actors exploited legacy authentication and ROPC flows in a massive Azure CLI password spray attack, bypassing MFA for dozens of organizations. Continue reading
Hide My Email Vulnerability Exposes Private User Data
A critical zero-day vulnerability in Apple’s Hide My Email feature allows attackers to uncover real addresses, compromising user anonymity after years of inaction. Continue reading
Tails Security Update 7.9.1: Critical Kernel Patches Released
The latest Tails security update 7.9.1 addresses critical Linux kernel vulnerabilities to protect user anonymity and patch potential deanonymization risks. Continue reading
Phishing Campaigns Are Now Using Advanced Device Fingerprinting
Modern phishing campaigns are evolving to dynamically adapt to a victim’s device and operating system, making attacks more personalized and difficult to detect. Continue reading
Tor Project Arti 2.5.0 Released: Stable CGO Encryption and Congestion Control
Discover the Tor Project Arti 2.5.0 update, featuring stable Counter Galois Onion encryption and native congestion control for faster, more secure anonymity. Continue reading
CVE-2026-48558: SimpleHelp Vulnerability Exploited to Deploy Djinn Stealer
Discover how attackers are leveraging the critical CVE-2026-48558 vulnerability in SimpleHelp to bypass authentication and deploy TaskWeaver and Djinn Stealer malware. Continue reading