China-Linked Actors Abuse DNS in Advanced Espionage Malware
A China-linked cyber espionage malware campaign demonstrates how attackers abuse DNS traffic to maintain stealthy, long-term command-and-control access.
A China-linked cyber espionage malware campaign demonstrates how attackers abuse DNS traffic to maintain stealthy, long-term command-and-control access.
Parrot OS 7.0 delivers a stability-focused update for security professionals, refining penetration testing tools, system performance, and privacy features while maintaining a practical, research-driven Linux environment.
OpenAI is experimenting with a new ChatGPT feature called Skills, drawing inspiration from Claude’s modular capabilities model. This represents a paradigm shift in how generative AI can be taught sophisticated workflows and domain-specific functions, potentially improving performance on structured, complex tasks.
Growing interest in a Trump-aligned tech workforce initiative highlights how AI job seekers are responding to rising demand for artificial intelligence skills across the U.S. technology sector.
Microsoft has rolled out hardware-accelerated BitLocker support for Windows 11, delivering faster encryption, lower CPU overhead, and stronger device protection. This update significantly improves enterprise deployment and endpoint security strategies.
A phishing vulnerability in vLex’s Vincent.ai exposed lawyers and law firms to AI-driven cyberattacks. Attackers manipulated the legal research tool to embed malicious links into AI-generated responses, creating a new avenue for targeted phishing in the legal sector.
The Romanian Waters Authority suffered a ransomware attack that disabled key hydrological systems, forced emergency containment actions, and exposed ongoing cybersecurity weaknesses in critical infrastructure.
Italy fined Apple $986 million for allegedly enforcing App Tracking Transparency in a way that disadvantaged competitors. The ruling highlights the collision of privacy frameworks, platform control, and competition law
A malicious npm package posing as a WhatsApp API library was found harvesting login tokens, messages, and contacts from developers, demonstrating a sophisticated supply chain attack that can persistently link attacker devices to compromised WhatsApp accounts.
A new Android SMS stealer campaign is spreading across Uzbekistan, using deceptive apps to capture messages and authentication codes. The attack highlights fast-evolving mobile threats and the need for stronger device security.