ESET uncovered a targeted Android spyware campaign that used a fake dating app to quietly spy on victims in Pakistan. The post Fake Dating App Delivers Android Spyware in Targeted Campaign appeared first on eSecurity Planet. This article has been…
Category: eSecurity Planet
Fake Clawdbot VS Code Extension Deploys ScreenConnect RAT
A fake Clawdbot VS Code extension silently deployed a ScreenConnect RAT through a trusted plugin. The post Fake Clawdbot VS Code Extension Deploys ScreenConnect RAT appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the…
Notepad++ Update Servers Hijacked in Targeted Supply Chain Attack
Attackers hijacked Notepad++ update servers to selectively deliver trojanized installers through a trusted update channel. The post Notepad++ Update Servers Hijacked in Targeted Supply Chain Attack appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read…
Iconics SCADA Vulnerability Can Render Systems Unbootable
Palo Alto Networks researchers identified an Iconics SCADA flaw that can render industrial systems unbootable. The post Iconics SCADA Vulnerability Can Render Systems Unbootable appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original…
Chrome Ad Blocker Caught Hijacking Amazon Affiliate Links
A Chrome extension posing as an Amazon ad blocker was found secretly hijacking affiliate links to redirect commissions to its developer. The post Chrome Ad Blocker Caught Hijacking Amazon Affiliate Links appeared first on eSecurity Planet. This article has been…
Why Container Security Remains a Challenge for Developers
A BellSoft survey shows container security incidents are common due to reactive practices and complexity. The post Why Container Security Remains a Challenge for Developers appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the…
Ivanti Fixes Actively Exploited RCE Flaws in Endpoint Manager Mobile
Ivanti patched actively exploited EPMM flaws that enable unauthenticated remote code execution. The post Ivanti Fixes Actively Exploited RCE Flaws in Endpoint Manager Mobile appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original…
Former Google Engineer Convicted in AI Trade Secret Theft Case
A former Google engineer was convicted of stealing confidential AI trade secrets to support a China-based startup. The post Former Google Engineer Convicted in AI Trade Secret Theft Case appeared first on eSecurity Planet. This article has been indexed from…
Critical Exploits, Data Breaches, and AI Threats Define This Week in Cybersecurity
Weekly summary of Cybersecurity Insider newsletters The post Critical Exploits, Data Breaches, and AI Threats Define This Week in Cybersecurity appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: Critical Exploits, Data…
Nvidia GPU Driver Flaws Enable Privilege Escalation Across Platforms
Nvidia patched GPU driver flaws that enable privilege escalation across platforms. The post Nvidia GPU Driver Flaws Enable Privilege Escalation Across Platforms appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article: Nvidia…
MongoDB Ransomware Is Still Actively Hitting Exposed Databases
MongoDB ransomware remains an active threat, fueled by exposed databases and insecure deployment practices rather than advanced exploits. The post MongoDB Ransomware Is Still Actively Hitting Exposed Databases appeared first on eSecurity Planet. This article has been indexed from eSecurity…
Google Disrupts Major Residential Proxy Network IPIDEA
Google disrupted the IPIDEA network, a major residential proxy service used to hide cybercriminal activity. The post Google Disrupts Major Residential Proxy Network IPIDEA appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original…
Top 7 Threat Intelligence Platforms & Software
Threat intelligence platforms help analyze and share cyber threat data. Discover top TIPs , their features, use cases, and comparisons. The post Top 7 Threat Intelligence Platforms & Software appeared first on eSecurity Planet. This article has been indexed from…
Cal.com Access Control Flaws Expose Millions of Bookings
Researchers found access control flaws in Cal.com that could enable account takeover and expose sensitive booking data across organizations. The post Cal.com Access Control Flaws Expose Millions of Bookings appeared first on eSecurity Planet. This article has been indexed from…
Federal Cyber Agencies Withdraw From RSAC Raising Collaboration Concerns
Federal agencies pull out of RSAC 2026 leaving questions around public/private sector collaboration. The post Federal Cyber Agencies Withdraw From RSAC Raising Collaboration Concerns appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original…
OpenSSL Vulnerabilities Cause Risk of Remote Code Execution
OpenSSL patched 12 flaws found by AISLE, including a high-severity bug that could enable remote code execution. The post OpenSSL Vulnerabilities Cause Risk of Remote Code Execution appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet…
Fortinet Confirms CVE-2026-24858 SSO Flaw Under Active Attack
Fortinet says attackers are actively exploiting CVE-2026-24858 to gain administrative access via FortiCloud SSO. The post Fortinet Confirms CVE-2026-24858 SSO Flaw Under Active Attack appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original…
CVE-2025-56005: Python PLY Flaw Enables Remote Code Execution
CVE-2025-56005 allows remote code execution in Python PLY via unsafe pickle deserialization during startup. The post CVE-2025-56005: Python PLY Flaw Enables Remote Code Execution appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original…
React Server Components Flaws Enable DoS Attacks
High-severity flaws in React Server Components enable unauthenticated denial-of-service attacks that can disrupt application availability. The post React Server Components Flaws Enable DoS Attacks appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original…
LayerX Finds Malicious ChatGPT Extensions Hijack User Accounts
LayerX found malicious ChatGPT extensions hijacking user sessions to steal sensitive AI data. The post LayerX Finds Malicious ChatGPT Extensions Hijack User Accounts appeared first on eSecurity Planet. This article has been indexed from eSecurity Planet Read the original article:…