A sophisticated malvertising campaign is targeting Windows users worldwide, leveraging Google Ads to distribute a dangerous information-stealing malware known as TamperedChef. The campaign, which began in June 2025 and was identified around September 2025, exploits users searching for PDF editing tools and appliance manuals, leading to silent infections across various…

Senior leaders from defense, intelligence, border security, and critical infrastructure sectors convened at Intersec 2026 to address crucial challenges in maritime border security for Gulf states. The closed-door strategic roundtable, hosted by Kearney in partnership with Intersec, focused on strengthening regional maritime defenses amidst escalating geopolitical, humanitarian, and technological pressures.…

Panasonic has unveiled its most comprehensive smart surveillance ecosystem to date at Intersec 2026. The new integrated platform combines AI-driven cameras, advanced analytics, and enterprise-grade video management systems. The announcement introduces Panasonic’s E-, V-, and P-Series camera lines, all designed to work within a connected ecosystem supported by a network…

Attackers are increasingly leveraging Windows Subsystem for Linux 2 (WSL2) as a stealthy hideout within corporate networks, circumventing traditional security measures. This sophisticated technique allows malicious actors to operate undiscovered, posing a significant threat to data security and network integrity. WSL2, designed to provide developers with a seamless Linux environment…

A sophisticated cybersecurity campaign is actively targeting users by impersonating Malwarebytes, a popular cybersecurity software, with the intent of stealing sensitive login credentials and cryptocurrency. This malicious operation, discovered by security researchers, was observed spreading actively between January 11 and January 15, 2026. Threat actors are distributing specially crafted ZIP…

Internal leaks from the ransomware group BlackBasta have exposed the critical infrastructure enabling its operations, shedding light on the shadowy ecosystem of cybercrime. These revelations, surfacing in February and March 2025, led to the identification of real identities, including Kirill Zatolokin, also known as Slim Shady, and exposed the operations…

Threat actors are increasingly weaponizing Visual Studio Code, a popular development tool, by exploiting its extension ecosystem to deploy multistage malware. A recent campaign, identified as Evelyn Stealer, leverages a malicious extension to deliver stealthy information stealing capabilities directly to developer workstations. This development is particularly concerning as developers often…

A recent cyberattack has emerged targeting South Korean users with the Remcos remote access trojan (RAT), disguised as legitimate VeraCrypt installers. The campaign, primarily focused on individuals involved in illegal online gambling, also poses a risk to general users seeking encryption tools. Security experts warn that this ongoing operation employs…

A sophisticated new spear-phishing campaign dubbed “Operation Poseidon” is leveraging Google Ads to distribute potent EndRAT malware, effectively bypassing traditional cybersecurity defenses. This operation, attributed to the financially motivated Konni APT group, targets South Korean organizations with cunning social engineering tactics, masquerading as legitimate entities to trick victims into compromising…

A significant security vulnerability has been discovered that targets Google Gemini, allowing the AI model to bypass authorization guardrails and exploit Google Calendar for data extraction through indirect prompt injection. Security researchers at Miggo Security disclosed the flaw, which was demonstrated to circumvent Google Calendar’s privacy controls by embedding a…

Attackers have successfully redirected employee paychecks without breaching any systems, highlighting a growing trend of social engineering attacks exploiting human vulnerabilities rather than technical exploits. The sophisticated attack, which did not involve malware or a network breach, was discovered when employees reported discrepancies in their direct deposit salary. This incident…

Five meticulously crafted malicious Chrome extensions are posing a significant threat to enterprise security, strategically targeting popular human resources and enterprise resource planning (ERP) platforms. These extensions, operating in concert, aim to steal critical authentication tokens, disable vital security controls, and ultimately achieve complete account takeover through session hijacking. The…