Google claims to have shut down a huge criminal network that used users' phones and PCs to distribute illegal data undetected.

A fake security app called TrustBastion is being used to drop remote‑access malware hosted on Hugging Face, with attackers generating thousands of Android package variants to evade detection, ...

A new Android malware campaign is using the Hugging Face platform as a repository for thousands of variations of an APK ...

Some Fast Pair products are vulnerable to unwanted remote pairings, and they'll all need individual patches to be fixed.

pentest-metasploitable2/ │ ├── 📜 README.md # This file │ ├── 📂 scripts/ # Automation Scripts │ ├── config.sh # Central configuration │ ├── master.sh # Main orchestration script │ ├── phase1_recon.sh ...

A hacktivist remotely wiped three white supremacist websites live onstage during their talk at a hacker conference last week, with the sites yet to return online. The pseudonymous hacker, who goes by ...

The year opened without a reset. The same pressure carried over, and in some places it tightened. Systems people assume are boring or stable are showing up in the wrong places. Attacks moved quietly, ...

The story you are reading is a series of scoops nestled inside a far more urgent Internet-wide security advisory. The vulnerability at issue has been exploited for months already, and it’s time for a ...

The plan to address a multimillion-dollar exploit continued with "phase two progress" on EVM after it scrapped a plan to roll back the blockchain. The Flow Foundation is continuing to implement a ...

The first ThreatsDay Bulletin of 2026 lands on a day that already feels symbolic — new year, new breaches, new tricks. If the past twelve months taught defenders anything, it's that threat actors ...