Researchers have uncovered Albiriox, a dangerous new Android banking trojan. It’s being distributed as a subscription service on the dark web and can perform transactions directly from a victim’s phone. Over 400 fake apps have already been identified.
Cybersecurity researchers have uncovered a massive malware campaign targeting users of the Chrome Web Store and Microsoft Edge add-ons. At least ten extensions, some with millions of installs, were secretly updated with spyware code in 2024. The malicious add-ons collected browsing data and sent it
The privacy-focused company Proton has launched a new encrypted spreadsheet tool called Proton Sheets. It aims to provide a familiar, collaborative workspace without the data collection of its mainstream rivals.
The UK government is moving forward with a plan to ban ransomware payments for public sector and critical infrastructure. Security Minister Dan Jarvis says “national security exemptions” will be included to avoid impossible choices for organizations.
Senior U.S. financial regulators told Congress the traditional banking system is under intense pressure from nonbanks and fintechs. They called for rapid modernization of rules to address AI, stablecoins, and a shifting competitive landscape, while also detailing new supervisory reforms.
The University of Pennsylvania is the latest organization breached via a zero-day flaw in Oracle’s E-Business Suite. The attack, linked to the Clop ransomware gang, compromised data for at least 1,488 Maine residents, with the full scope still unclear.
Lausanne-based Saporo has secured €7 million in Series A funding to scale its graph-native identity security platform. The company argues that current ITDR tools create a “false sense of security” by showing too many attack paths without providing a way to systematically fix them. This round, led by
A major new survey finds one in ten UK children have been targeted by online blackmail. Parents report feeling ill-equipped and are demanding stronger action from tech companies, which they say aren’t doing enough to protect kids.
The KDE Project has issued a security advisory for KDE Connect and its variants, warning of an authentication bypass vulnerability. The flaw affects specific versions released from around March 2025 and is primarily a risk on untrusted public networks. Here’s how to check if you’re safe.
AWS is overhauling its MSP program with significant new financial incentives set to launch on January 1, 2026. The move aims to reward partners driving cloud adoption, managed services, and advanced services like generative AI and cybersecurity. According to AWS, validated MSP partners drive 91% hig
