Threats

On October 21, two PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) were disclosed, affecting nearly 70% of websites worldwide. But if you think this’s only an admins’ headache, read on: we explain why your photos, music, archives, games, NAS and smart-home systems may be at risk, and how to protect your data and devices.

AI has learned how to quickly gather scattered details about a person, link their accounts together, and turn a digital footprint into a detailed dossier. We look at how artificial intelligence is changing doxing — and what you can do to make deanonymization harder.

Let’s look at how to use AI as a resume editor without oversharing to build a document that gets past automated screening systems and catches a recruiter’s eye.

Scammers are promising downloads of leaked copies of GTA VI, early access to the game, or a chance to become a beta tester. Here’s how you can spot these schemes and avoid falling into the trap.

Google has released its September security update for Pixel smartphones – fixing 110 vulnerabilities. One of the vulnerabilities appears to be being used actively in targeted attacks.

What do malicious browser extensions, crypto theft, and fake Chrome update guides have in common? We look at a recent campaign involving 19 infected add-ons.

How budget smart-TVs and set-top boxes infect home networks and join malicious botnets.

Researchers have built a device that can interfere with critical systems aboard a Boeing 737. Here’s how the attack works, and whether it’s time you started worrying about flying yet.

We explain how to use AI the right way for schoolwork, how to fact-check chatbot responses, and how to protect your personal data.

It steals passwords, banking credentials, and verification codes, and lets attackers control a smartphone remotely. Here’s why this new Android threat is so dangerous, and how it manages to transfer stolen data home.

Sketchy online stores, crypto investments promising fast returns, hidden subscriptions, and browser extensions loaded with harmful software… online scams have moved well beyond classic phishing. Here’s how to spot the websites operating in this gray area, and what kind of harm they can do.

Attackers have found yet another source of free computing resources: automotive head units. We take a look at the first malware specifically targeting cars for infection.

We revisit the key rules for setting up IP cameras and related devices so that you don’t end up starring in a reality show — whether at home, in a hotel, or in rented accommodation.

Steam forums are the latest battleground for ClickFix attacks. We break down how attackers disguise themselves as helpful commenters to trick gamers into installing a crypto miner on their PCs.

Visit a familiar website, and along with the usual ad banner you could pick up a script that steals cryptocurrency. How can you protect yourself from attacks delivered through online ads?

Our experts investigated which file extensions cybercriminals use most in their email blasts. Here’s a breakdown of the most dangerous attachment types — and how to keep your devices safe from malicious files.

CrashStealer is a macOS infostealer disguised as a videoconferencing app. It abuses Apple’s own trusted mechanisms to sneak onto your computer unnoticed.

ClickFix attacks, which were once seen mostly on Windows, are now spreading to macOS. We break down the mechanics of the attack, and ways to protect your device.

Researchers have shown that a single text message can trick Gemini into opening the windows of your house or launching a Zoom call, or poisoning its own long-term memory. How do you protect yourself against these attacks?

Cybercriminals spend years mastering the art of manipulation to trick their targets. Here’s a look at how social engineering actually works, the exact emotions scammers weaponize, and what to do if you’ve already fallen for it.

Hackers have developed a PowerShell script that hijacks Telegram sessions and grants an attacker access to accounts without a password or verification codes. Here’s a breakdown of how it works and how to stay safe.