Private companies will be legally allowed to conduct cyberattacks against foreign groups on behalf of the US government.
Fake sites were popping up at the top of search engine results pages and used to convince victims to download a trojanized PDF viewer.

A “Swiss cheese” approach to defense seems to be working, as the number of unwanted notifications dwindles.
It doesn’t matter if the attacker is the host or a participant.
Fake downloads of The Odyssey are delivering Lumma Stealer, and the stolen session cookies walk straight past your two-factor authentication
Daybreak now offers two different models that come with varying degrees of compliance.
Shipping and logistics powerhouse suffers a cyberattack, affecting almost a dozen of its clients – we take a look at the details.
Someone used social engineering to access an employee’s email account, viewing purchase orders, engineering-related documentation, and more.
Insurance cards, intake forms, health insurance policy numbers, and other information stolen in major attack.
Samsung’s bloatware carried dangerous flaws that enabled access to the phone’s microphone and camera.