Aggregator

宏观、政策和现货需求提供火种，拥挤空头和清算机制提供燃料。

The Dutch Autoriteit Persoonsgegevens (AP) has advised Twitch users to opt out of sharing dat

MacSync Stealer is expanding its macOS-focused theft operation through a rotating network of more than 30 domains, using stable execution and network patterns to steal credentials, browser data, cloud access keys, SSH material, and sensitive user files. Earlier research by RST Cloud identified MacSync infrastructure and observed command-and-control replacement after public disclosure. Microsoft’s subsequent telemetry-led […]

The post MacSync Stealer Uses 30+ Rotating Domains to Steal macOS Credentials and Exfiltrate Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation in the wild, according to the Polish Computer Emergency Response Team (CERT Polska). The vulnerability in question is CVE-2026-73570 (CVSS score: 8.9), which refers to a case of command injection that can lead to remote code execution. "A remote code execution vulnerability exists in Zimbra

A newly discovered Android malware family named Manic combines banking fraud with full-scale spyware, and it comes with a trick researchers rarely see in the wild: when an infected phone has no internet connection of its own, it can quietly borrow one from another infected device nearby. The malware was identified by ThreatFabric’s Mobile Threat […]

The post New Android Malware Steals Banking PINs and Relays Data Through Someone Else’s Infected Phones appeared first on Cyber Security News.

Security researchers Tom Stacey from PortSwigger and Tobia Righi from TurtleSec have introduced a new category of HTTP request smuggling attacks known as “CRLF-Powered Desync Attacks.” This method exploits a frequently overlooked HTTP header injection vulnerability, which can lead to full account takeovers, theft of HTTPOnly cookies, and even the creation of self-propagating desync worms. […]

The post New CRLF Desync Attack Lets Hackers Steal HTTPOnly Cookies and Hijack Accounts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Nella giornata odierna il team anti frode D3lab ha rilevato la 132a campagna di phishing del 2026 r

Building on the last diary on Using MS Graph and Powershell, let's look at "Risky" logins.Risky l

Research by: Jiří Vinopal (@vinopaljiri) Abstract What if a trusted security component could be repurposed into an attacker-controlled kernel primitive? What if a signed Microsoft remediation driver could be instructed to execute arbitrary file and registry operations from Ring 0 – without exploits, vulnerabilities, or memory corruption? In this publication, we present the first full […]

The post BTR Reforged: Weaponizing Defender’s Remediation Driver as a Kernel Operation Primitive appeared first on Check Point Research.

Research by: Jiří Vinopal (@vinopaljiri)AbstractWhat if a trusted security component

31,5 ТБ научных данных похитили из 8000 аккаунтов преподавателей.

NETSCOUT named a Leader and Ace Performer in the QKS Group Spark Matrix™ Distributed Denial of Service (DDoS) Mitigation based on technology and customer impact.

A single phishing email was enough to give attackers access to a finance employee’s Microsoft 365 account and redirect vendor payments. The incident shows how criminals can bypass multi-factor authentication without installing malware or breaking into a company device. The attackers used a targeted HR-themed message that claimed a paid-time-off request had been denied. The […]

The post Hackers Bypass Microsoft 365 MFA and Hijack Finance Mailbox to Steal Payments appeared first on Cyber Security News.

Security researchers have demonstrated a “Zombie Card” attack that can reactivate certain expired Visa contactless cards, allowing them to be used for NFC payments. This attack exploits a vulnerability in Visa’s EMV Kernel 3 regarding the handling of card expiry data. An attacker, positioned between the card and the payment terminal, can modify the expiry […]

The post New Zombie Card Attack Lets Expired Visa Cards Make Contactless Payments appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Microsoft Graph is a newer API that is meant to replace several others.  OK, it's at version 2.3.9,

NCSC urged sandboxing, oversight and tight access controls for autonomous AI agents

Your Mac comes with a built-in firewall, but it’s probably not something you’ve given much tho

Defense contractors in the US are doubting their own self-assessment scores under CMMC Phase I, even as those scores hit an all-time high