A high-severity vulnerability (CVE-2026-0628) in Google Chrome's Gemini AI allowed malicious extensions to hijack the AI panel and steal sensitive…
Read More »Unit 42
Entity category: organization
Identity has become the primary attack vector, with stolen credentials and phishing driving nearly 90% of breaches and enabling attackers…
Read More »
A new trend called "vibe extortion" sees low-skilled criminals using AI to script professional-seeming threats, effectively masking their lack of…
Read More »
A new phishing scam tricks users with fake alerts about spam filters blocking legitimate emails, urging them to click links…
Read More »
A critical vulnerability (CVE-2025-21042) in Samsung smartphones allows attackers to install LandFall spyware via manipulated DNG images sent through WhatsApp,…
Read More »
The Landfall spyware campaign targeted Samsung Galaxy phones by exploiting a zero-day vulnerability (CVE-2025-21042) to steal personal data without user…
Read More »
Scattered LAPSUS$ Hunters (SLH) is a confirmed alliance merging the reputations of Scattered Spider, ShinyHunters, and LAPSUS$, signaling a long-term…
Read More »
The "Jingle Thief" cyber campaign targets retailers by exploiting cloud environments using stolen credentials from phishing, bypassing traditional malware and…
Read More »
Cybersecurity experts discovered a sophisticated attack using a critical SAP NetWeaver vulnerability (CVE-2025-31324) to deploy Auto-Color malware on Linux systems,…
Read More »
Microsoft warns of active cyberattacks targeting on-premises SharePoint servers, risking sensitive data in critical industries like government and healthcare. Attackers…
Read More »
A critical zero-day vulnerability in Microsoft SharePoint (CVE-2025-53771) is being actively exploited, risking data breaches for businesses and government agencies.…
Read More »