A sophisticated malvertising campaign orchestrated by a threat actor known as D-Shortiez is exploiting a specific behavior in Apple’s WebKit browser engine to trap iOS Safari users on malicious scam pages. This cunning tactic, dubbed the “back-button hijack,” prevents victims from easily navigating away, forcing them onto fraudulent websites through…

A sophisticated malvertising campaign is actively targeting macOS users globally, deploying a new variant of the AMOS infostealer named “malext.” Attackers are leveraging Google Search ads to direct unsuspecting victims to fake help articles on free text-sharing platforms. These seemingly innocuous pages contain deceptive terminal commands that silently install the…

The recent surge of AI-assisted cyberattacks against Fortinet FortiGate appliances has been traced to an open-source, AI-native security testing platform named CyberStrikeAI. This discovery, made by Team Cymru, sheds light on how threat actors are leveraging sophisticated artificial intelligence tools for malicious purposes. The platform was identified through the analysis…

A coordinated cyber offensive launched by the United States and Israel on February 28, 2026, code-named Operation Epic Fury and Operation Roaring Lion respectively, has ignited a volatile cyber conflict. This escalating cyber conflict saw Iran go offline, prompting a swift and formidable retaliatory campaign from hacktivist groups and state-aligned…

An autonomous bot named hackerbot-claw launched a week-long attack campaign targeting major open-source projects, exploiting GitHub Actions CI/CD misconfigurations between February 21 and February 28, 2026. The bot opened over a dozen pull requests across at least six repositories, successfully achieving remote code execution in at least four of them,…

A sophisticated supply chain attack has been uncovered, targeting developers by exploiting the OpenVSX registry to inject malicious code into popular VS Code extensions. The attack, first identified on March 2, 2026, involved unauthorized code being embedded within two versions of the Aqua Trivy VS Code extension, versions 1.8.12 and…

Android users are facing a new security threat as Google announced on Monday that a high-severity flaw affecting an open-source Qualcomm component has been exploited in the wild. This vulnerability, identified as CVE-2026-21385, carries a CVSS score of 7.8 and resides within the Graphics component of the Android operating system,…

A new information-stealing malware, dubbed AuraStealer, has emerged as a significant threat in the cybersecurity landscape since mid-2025. Developed by Russian-speaking threat actors, AuraStealer first surfaced on underground hacking forums in July 2025. Its rapid deployment followed the disruption of the Lumma stealer infrastructure, a move that created a market…

A sophisticated phishing campaign known as GTFire is exploiting two of Google’s most trusted services, Firebase and Google Translate, to pilfer login credentials from unsuspecting victims globally. This alarming trend highlights how cybercriminals are increasingly leveraging legitimate infrastructure to bypass traditional security measures, making it significantly harder to detect and…

Cybersecurity researchers have disclosed a critical vulnerability in Google Chrome, identified as CVE-2026-0628, that could have allowed attackers to escalate privileges and access local files on a user’s system. This flaw, which has since been patched by Google, highlights emerging security challenges in the integration of artificial intelligence (AI) directly…

A significant cybersecurity alert has been issued by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) regarding a new malware variant named RESURGE. This sophisticated malware is actively exploiting a critical zero-day vulnerability, CVE-2025-0282, to breach Ivanti Connect Secure devices. The discovery highlights the ongoing threats to secure remote access…

This week’s cybersecurity landscape reveals a dynamic and interconnected threat environment where vulnerabilities in network systems, cloud configurations, AI tools, and everyday applications are being actively exploited. The ongoing trends highlight a pattern of faster, more sophisticated attacks that leverage normal functionalities and trusted services as entry points, with a…