ClearFake has expanded a fake CAPTCHA scam into a chain that steals cryptocurrency and credentials while disabling endpoint protection. It turns…
Tag: EN
One WeChat Call Was Enough to Hijack Accounts Across iPhone and Android
A new wave of WeChat vulnerability can turn an incoming voice call into a zero-click account takeover, enabling a compromised account to target another…
Microsoft Expands Windows Family Safety With Built-In Age Verification and Parental Controls
Microsoft is expanding Windows Family Safety with account-based age verification, privacy-focused age signals, and improved parental controls. The company…
Why hostile state cyber activity is now a day-to-day business risk
Christopher Clark, Cyber Security Incident Response Team Director, Thrive Geopolitical escalation can become a cyber security problem for businesses far…
Researchers Build WeChat Zero-Click Worm Hijacking Phones via Calls
The hacking tool, built using a combination of AI models, is effective against Android and iOS devices
Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA
Cybercriminals are hijacking artificial intelligence (AI) user accounts via information stealer logs to create “stolen keys” that grant illicit access to…
Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension
The critical, unauthenticated bugs allow attackers to bypass authentication and proxy a user’s browser traffic.
UK Law To Ban Nudity On Children’s Devices
Government promises legislation forcing Apple, Google to ban taking and sending of nude images on devices used by children
NCSC Warns Shadow AI Is Creating New Security Blind Spots for UK Businesses
The UK’s National Cyber Security Centre (NCSC) has warned organisations about the security risks posed by “shadow AI”, as employees continue to turn to…
Coding Start-Up Cognition AI Raises $2bn At $48bn Value
AI programming start-up’s latest funding round nearly doubles its value after a $1bn round three months ago
Google fixes the seventh actively exploited Chrome zero-day of 2026
Google patched 230 Chrome flaws, including an actively exploited V8 bug that could let attackers run arbitrary code through a crafted HTML page. Google…
Forescout Expands Global Investment in Channel Partners
Forescout has expanded its investment in its global partner ecosystem to strengthen technical expertise and help partners support customers managing…
France’s Mistral AI Raises Record €3bn, Amid Strategy Shift
Latest funding round values French start-up at €21bn, as it devotes capital to building data centres, offers AI integration services
Cyber Briefing: 2026.09.09
Authenticated sessions exploited, application security flaws, weak account-recovery mechanisms, and exposed credentials to gain unauthorized access, steal…
Ransomware Affiliate Pretends to be Recovery Service for Extortion
An alleged ransomware affiliate is pretending to be a ransomware recovery service named “Ransom Busters,” reaching out to victims before the attacks…
Meta Rolls Out Assistant With Email, Payment Capabilities
New Muse AI assistant can access apps on user’s phone, autonomously sending emails, making payments, booking travel, amid security concerns
Gigabud Uses Android App Cloning to Evade Fraud Detection
Gigabud clones banking apps into a work profile to break the link between malware alerts and fraud
Ireland Probes X Over Age Assurance, Parental Controls
Ireland’s media regulator cites concerns over ineffective measures to protect children from adult material permitted on platform
Huntress Uncovers Phishing Attacks Using Fake Browser Pages and Rogue RMM Tools
Huntress researchers have uncovered two phishing attacks that combined convincing fake browser windows with legitimate remote management software to…
ASML Breaks Ground On New Plant Amid Booming Demand
Netherlands’ ASML begins construction of 35-hectare plant 7km from headquarters, as Samsung, TSMC adopt new tools