A team of researchers at Calif, a cybersecurity startup based in Palo Alto, California, has built a tool capable of hacking Android and iOS phones via a simple incoming call. The hacking tool, dubbed WeWorm, relies on the exploitation of… Read More "Researchers Build WeChat Zero-Click Worm Hijacking Phones via Calls"
IIS vs Apache: Which is the Best Web Server?
If you host a website, chances are good that you are running either Apache or Internet Information Services (IIS). Depending on the data source, they are two of the most common web server platforms, comprising a virtual triumvirate with Nginx for control of… Read More "IIS vs Apache: Which is the Best Web Server?"
Researchers Identify AliExpress Phishing Domains Before Registration
Security researchers have reported flagging 10 web addresses weeks before they were registered, then watching them go live as entry points to an AliExpress-themed phishing site. EfficientIP Research Labs said it identified the potential .cyou domains on June 9 in… Read More "Researchers Identify AliExpress Phishing Domains Before Registration"
What is Encryption? | UpGuard
In cryptography, encryption is the process of encoding information or sensitive data so only authorized parties can access it. Encryption does not itself prevent interference and man-in-the-middle attacks, but denies intelligible content to the interceptor. How Does Encryption Work? In an encryption scheme, the… Read More "What is Encryption? | UpGuard"
iRhythm Data Breach Impacts at Least 360,000 People
Medical equipment provider iRhythm is notifying more than 360,000 people that hackers stole their personal information. The data breach was identified on June 8 and involved third-party-hosted business applications that stored certain iRhythm information, the company says. During its investigation… Read More "iRhythm Data Breach Impacts at Least 360,000 People"
RemControl Banking Trojan Gives Attackers Remote Control of Android De
A newly-discovered Android banking trojan abuses Accessibility Services to gain remote control over victim’s devices and collect credentials including PIN codes, mobile banking codes and card expiry dates, Group-IB researchers have warned. The trojan, named RemControl by its operator, has… Read More "RemControl Banking Trojan Gives Attackers Remote Control of Android De"
What is a Content Security Policy (CSP)?
Every website needs to be set up with a cloud service provider, but what about your other CSP: Content Security Policy? The Content Security Policy (CSP) is a standard provided in an HTTP response header that helps prevent cross-site scripting… Read More "What is a Content Security Policy (CSP)?"
Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US
A dual citizen of Ukraine and Russia pleaded guilty in a US court for his role in a sophisticated money laundering organization used by cybercriminals. The individual, Oleg Korniev, 42, was a leader of Your Mule Cashout (YMCO), an international… Read More "Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US"
⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More
Ravie LakshmananOct 12, 2026Cybersecurity News / Hacking Some meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, they were already testing it. That’s not much time to read the warning,… Read More "⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More"
Luna Moth Leaks Shed Light on Ransomware Group’s Inner Workings
Leaked files have disclosed the inner workings a major ransomware group, which demonstrates a multi-layered, businesslike approach to its operations. The analysis by Check Point researchers has revealed information on the instructions the Luna Moth group provides to ‘staff’ on… Read More "Luna Moth Leaks Shed Light on Ransomware Group’s Inner Workings"