Ken Underhill

The U.S. launched a Strike Force to dismantle global crypto scam networks.

Hackers use AppleScript to disguise macOS malware as fake app updates, bypassing Apple’s protections.

Hackers are exploiting Meta Business Suite to launch global phishing attacks.

North Korean hackers are exploiting Google’s Find Hub to wipe Android devices.

Ivanti patched severe Endpoint Manager flaws that could let attackers gain system access.

Holiday fraud in 2025 is evolving faster than ever, as attackers use AI, automation, and stolen data to launch large-scale campaigns.

A critical BeeStation OS flaw lets attackers run remote code on unpatched Synology devices.

Wiz Security found 65% of top AI companies leaked secrets on GitHub, exposing sensitive data and highlighting critical security gaps.

A new Zoom Workplace flaw (CVE-2025-64740) lets attackers escalate privileges on Windows.

Critical flaw in Monsta FTP (CVE-2025-34299) allows remote code execution without authentication, putting thousands of servers at risk.

Proofpoint uncovered UNK_SmudgedSerpent, an Iranian-linked espionage campaign that exploits trust and blurs attribution.

The Intel case underscores the ongoing risk of insider threats and the need for stronger data protection measures.