ThreatsDay: OAuth abuse, Signal hijacks, Zombie ZIP evasion, Teams malware, AI hack, RondoDox botnet, and more cyber stories.

As enterprises increasing depend on cloud services, living off the land has evolved into living off the cloud.

The long-running Russian military hacking group tracked as Fancy Bear and APT28 has been wielding a new, "high-end custom arsenal" of custom ...

ESET researchers document how the Sednit APT group has reemerged with a modern toolkit centered on two paired implants – BeardShell and Covenant.

Hackers are abusing Windows Terminal in a new ClickFix attack that installs Lumma Stealer and steals browser passwords while ...

This week, Cisco patches and hacks. Trojanized app targeted Israelis. Bye-bye, Tycoon 2FA. Also bye-bye LeakBase. A ...

10 Powerful Ways to Use PowerShell Across Windows, Linux, and macOS Your email has been sent PowerShell can do far more than most users realize. Explore 10 hidden capabilities that save time, improve ...

An AI-assisted hacker campaign breached over 600 FortiGate firewalls worldwide by exploiting weak credentials and public interfaces in a chilling demonstration of how generative AI ...

One DJI Romo vacuum owner tried to code an app to control his vacuum with a PS5 controller. Insufficient authentication meant that he was able to access data streams from the entire fleet of DJI ...

A government customer of sanctioned spyware maker Intellexa hacked the phone of a prominent journalist in Angola, according to Amnesty International, the latest case of targeting someone in civil ...

The immediate threat may be fixed, but this raises serious questions. The immediate threat may be fixed, but this raises serious questions. is a senior editor and founding member of The Verge who ...

A popular mobile app called Chat & Ask AI has more than 50 million users across the Google Play Store and Apple App Store. Now, an independent security researcher says the app exposed hundreds of ...