Researchers just discovered the DarkSword iPhone hacking tool, which could infect hundreds of millions of devices. Here's what to do.

(via Cult of Mac - Your source for the latest Apple news, rumors, analysis, reviews, how-tos and deals.)

North Korean army of IT workers infiltrates western companies to make money for the nation.

The technique exploits Unicode Private Use Area characters, which render as zero-width whitespace in virtually every code editor and terminal.

Long-running SocksEscort proxy network brought down by US-EU operation

Zombie ZIP vulnerability lets malware stroll past gates of 95% of AV suites

Stryker, a Fortune 500 medical technology company, has been hit with a massive cyberattack that allegedly saw over 200,000 devices wiped clean, affecting employees and operations across the globe.

Intel has revealed an 8192-way SIMD compute engine for fully homomorphic encryption math called Heracles. By operating directly on encrypted data, it has the potential to eliminate entire classes of attacks under some workloads.

A team of researchers discovered that they can break cryptographic client isolation on a number of wireless routers by taking advantage of how Wi-Fi networks work.

An AI strategist used Claude Code to reverse engineer his robot vacuum and control it with a PlayStation controller, but it accidentally gave him control of thousands of similar devices spread all across the world.

After scammers were successfully able to phish their way through Netgear customers for months, the company was forced to adopt a more unconventional cybersecurity measure: a 16-year-old intern named Wyatt. He was able to eventually lead the law firm to the source bank accounts of these scammers back in India.

Hackers from Russian, China, India, North Korea, and elsewhere are using Google's Gemini AI to augment their attacks, Google says. From generating phishing lures, to translating text, coding, and vulnerability testing, Gemini is a core component of their hack attempts.

Always get your wares from reputable sources.

The U.S. Air Force is banning its personnel from using smart glasses while in uniform and limited the use of earbuds for official duties.

Bug in Nitrogen ransomware locks victims' data way forever

AMD auto-update delivers software insecurely, company says MITM attacks are "out of scope"

DeFi platform Step Finance has been hit with a $40 million breach stemming from compromised devices used by its executive team.

The Notepad++ project yesterday disclosed that its update server was covertly hijacked in a targeted supply chain attack that began in June 2025,

Security researchers are warning that the growing ecosystem around ‘OpenClaw,’ the self-hosted AI assistant formerly known as Clawdbot, has already become a target for malware distribution.

Google says that a WinRAR exploit that has been patched six months ago remain a popular attack vector, especially for state-sponsored threat actors. The vulnerability allows malicious archives to install malware on critical Windows folders.

OpenSSL is a security standard that protects most of the internet, and cybersecurity researchers have recently discovered vulnerabilities in the standard that have been lying undetected for decades.