Malware infects Android-based automotive head unit firmware
Kaspersky expert has discovered new Android malware designed to serve ads and build a proxy botnet. It’s delivered through legitimate software for DoFun head units.
Malware & Ransomware
New Manic Android malware can exfiltrate data through nearby devices
A new Android malware named Manic targeting users in multiple European countries has a fallback data exfiltration mechanism that uses nearby infected devices.
AI agent suggested installing a malware package. Engineer almost took its advice
Fortunately, the company had a policy of checking source code on GitHub first
Rust arrayref 0.3.10 crate installs malware
arrayref 0.3.10 (2026-08-20 07:15 UTC, by droundy) adds a first-ever dependency on proc-macro1 1.0.107 (07:11 UTC, by dtolney), whose build.rs downloads and executes a remote binary. Both are live as I file this; security@rust-lang.org e...
Packing Malware in Rosetta 2
Packing malware in Rosetta 2 noblenote 19th Aug 2026•13 min read•Tags: talks, security, macOS, dyldUpdated on 19th Aug 2026Table of ContentsTL;DRIntroductionUnderstanding how Rosetta 2 ends up giving us AARCH64 Ahead-of-timeJust-in-timeWhat else is in Rosetta 2?Gamehacking over…
Cyber spies used malware from GitHub to hack EncroChat cryptophone network
Computer Weekly reveals for the first time how French cyber spies hacked EncroChat phones used by organised crime groups.
Finger: A Protocol from 1977 Is Still Delivering Malware in 2026
Attackers revived the 1977 finger protocol to drop a Python RAT on a default Windows install. The full attack chain, and how Artemis caught it live.
Geekom admits to shipping malware-laced network drivers for AMD mini PCs
Nuke the entire install from orbit. It
Apple now uses iPhone alerts for targets of mercenary spyware
Apple explains how Threat Notifications help protect iPhone users targeted by mercenary spyware.
Russian ransomware group Clop claims cyberattacks on Shell and Philips
Russian hacking group Clop has claimed responsibility for attacks on Shell and Philips, although the extent of any damage remains unclear. Both companies confirmed that they had experienced a security incident after BNR reported on the claims.Shell says it is “aware of a…
The dumbest ransomware I've ever seen
A few days ago, I saw a Facebook post from an anonymous person who shared an APK for an app they claimed was an AI teaching app for high school students. The …
Ransomware gangs skip the CEO, head straight for the 40-something IT manager
Gen Xers who feel triggered by this should remember to unplug the network cable and call the cops