Technology ❯ Cybersecurity ❯ Malware

Exploits

DarkSword Zero-Day Vulnerabilities Zero-Day Exploits Cross-Site Scripting Developer Tools Unauthorized Access Data Breaches Third-Party Plugins Phishing-as-a-Service Cleo File-sharing Software LNK Files Cobalt Strike User Safety Denial of Service Microsoft Office SploitLight CVE-2024-7399 Autorun Vulnerability API Vulnerabilities Attack Vectors User Data Theft CVE-2012-6636 CVE-2026-86950 Podcasts App Vulnerabilities Memory Vulnerabilities WinRAR Vulnerability CVE-2026-21509 Darksword Data Corruption XPC Framework Remote Code Execution Developer Security Device Trust Steam Workshop Zimbra Vulnerability Google Passkeys TCC Bypass Techniques Blockchain Technology

Fake iPhone Duo Pre-Order Site Uses DarkSword to Hack Unpatched iPhones

The page exploits a leaked web-based flaw to grab cryptocurrency wallets; keychain credentials; Apple Notes; location data unless iOS is updated.

AmnesiaStealer: macOS Rust Stealer That Lets Attackers Run Hidden Live Browser Sessions

Unit 42 Reveals Three Post‑Compromise ‘Pass‑ta‑key’ Attacks Targeting Google Passkeys

Laundry Bear Uses OWA XSS to Install OWAReaper Backdoor

Meccha Chameleon Workshop Maps Delivered Malware and Hackers Took Over Official Discord

SonicWall SMA1000 Zero-Days Exploited Before Patch, Custom Malware Deployed

Researchers Find macOS Chain Letting Standard Users Disable EDR and MDM

Adobe Reader Zero-Day Exploited for Months Through Malicious PDFs

Google Rushes Chrome 146 Update to Fix WebGPU Zero-Day Exploited in the Wild

Google Warns of Widespread, Ongoing Exploitation of WinRAR Vulnerability

Apple Podcasts Auto-Opens to Unwanted Shows, Raising Security Concerns

Samsung Releases Patch for Actively Exploited Android Zero‑Day CVE-2025-21043

Cursor Will Keep Default That Lets Repos Run Code on Open

New Docker Malware Locks Down Exposed APIs and Spreads, Laying Botnet Groundwork

Apple Releases Cross-Platform Patches for Zero-Day in WebKit’s ANGLE Engine