Search Results

UAT-10362 Targets Taiwanese NGOs with LucidRook Malware in Spear-Phishing Campaigns

A previously undocumented threat cluster dubbed UAT-10362 has been attributed to spear-phishing campaigns targeting Taiwanese non-governmental organizations (NGOs) and suspected universities to deploy a new Lua-based malware called LucidRook. "LucidRook is a sophisticated stager that embeds a Lua interpreter and Rust-compiled libraries within a dynamic-link library (DLL) to download and

Imran Khan 4 min read

Google Rolls Out DBSC in Chrome 146 to Block Session Theft on Windows

Google has made Device Bound Session Credentials (DBSC) generally available to all Windows users of its Chrome web browser, months after it began testing the security feature in open beta. The public availability is currently limited to Windows users on Chrome 146, with macOS expansion planned in an upcoming Chrome release. "This project represents a significant

Imran Khan 3 min read

Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure

A critical security vulnerability in Marimo, an open-source Python notebook for data science and analysis, has been exploited within 10 hours of public disclosure, according to findings from Sysdig. The vulnerability in question is CVE-2026-39987 (CVSS score: 9.3), a pre-authenticated remote code execution vulnerability impacting all versions of Marimo prior to and including

Imran Khan 4 min read

Cybersecurity

Backdoored Smart Slider 3 Pro Update: Nextend Server Breach Analysis

Unknown threat actors have hijacked the update system for the Smart Slider 3 Pro plugin for WordPress and Joomla to push a poisoned version containing a backdoor. The incident impacts Smart Slider 3 Pro version 3.5.1.35 for WordPress, per WordPress security company Patchstack. Smart Slider 3 is a popular WordPress slider plugin with more than 800,000 active installations across its free and Pro 

Imran Khan 3 min read

Browser Extensions Are the New AI Consumption Channel That No One Is Talking About

While much of the discussion on AI security centers around protecting ‘shadow’ AI and GenAI consumption, there's a wide-open window nobody's guarding: AI browser extensions.  A new report from LayerX exposes just how deep this blind spot goes, and why AI extensions may be the most dangerous AI threat surface in your network that isn't on anyone's 

Imran Khan 4 min read

GlassWorm Campaign Uses Zig Dropper to Infect Multiple Developer IDEs

Cybersecurity researchers have flagged yet another evolution of the ongoing GlassWorm campaign, which employs a new Zig dropper that's designed to stealthily infect all integrated development environments (IDEs) on a developer's machine. The technique has been discovered in an Open VSX extension named "specstudio.code-wakatime-activity-tracker," which masquerades as WakaTime, a

Imran Khan 4 min read

Technology, networking, cybersecurity, AI

Microsoft starts removing Copilot buttons from Windows 11 apps

Microsoft Begins Removing Copilot Buttons from Windows 11 Apps Microsoft has started the process of removing Copilot buttons from select applications in Windows 11, according to reports from software tracking sites. The change affects built-in apps such as Paint and Notepad, where the AI assistant integration button is being phased out. This move comes as...

Ethan Johnson 3 min read

EngageLab SDK Flaw Exposed 50M Android Users, Including 30M Crypto Wallet Installs

Details have emerged about a now-patched security vulnerability in a widely used third-party Android software development kit (SDK) called EngageLab SDK that could have put millions of cryptocurrency wallet users at risk. "This flaw allows apps on the same device to bypass Android security sandbox and gain unauthorized access to private data," the Microsoft Defender

Farhan Malik 3 min read

Hardware

Framework Teases Linux Features for April 21 Event

Framework is hinting at several Linux enhancements for its upcoming virtual event on April 21. The teases include demos of Linux on its modular laptops, aiming to improve compatibility for open-source users.

Henry James 3 min read

Business

Founders’ Lessons from Anjuna Layoffs Recovery

Anjuna cut 25% of its staff in 2022 but recovered with new funding and hires by 2025. The startup's path offers practical advice for founders on managing downturns.

John McLane 3 min read