Antivirus and Security news

Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs

The infection chain includes a fake CAPTCHA page, a Bash script, a Nuitka loader, and the Python-based infostealer. The post Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs appeared first on SecurityWeek. more…

A critical Windows security fix puts legacy hardware on borrowed time

Microsoft is finally blocking a long-since retired program that it said led to “abuse and credential theft,” yet remained widely trusted for years. Beginning in April, Redmond will remove trust for kernel drivers that haven’t been vetted through its Windows Hardware Compatibility Program (WHCP). The company is specifically targeting kernel drivers signed by the now […] more…

AI threatens jobs that can be ‘unbundled’

There have been plenty of warnings about job losses due to AI, particularly in the world of IT and in the reduction of entry-level positions. Doom mongers’ claims that AI is going to eradicate all our jobs look to be exaggerated but there is little room for complacency as there are some roles most definitely […] more…

Pro-Iranian Hacking Group Claims Credit for Hack of FBI Director Kash Patel’s Personal Account

The group that it was making available for download emails and other documents from Patel’s account. The post Pro-Iranian Hacking Group Claims Credit for Hack of FBI Director Kash Patel’s Personal Account appeared first on SecurityWeek. more…

One-third of help-desk tickets stop work, says study

Nearly one-third of all help-desk tickets handled by large organizations are work-stoppers, according to a study from help-desk automation company Fixify, which also found Tuesday to be the busiest day of the week for help desks. “Monday gets the reputation, but Tuesday gets the tickets,” it the study said. Around one in eight of the […] more…

In Other News: Palo Alto Recruiter Scam, Anti-Deepfake Chip, Google Sets 2029 Quantum Deadline

Other noteworthy stories that might have slipped under the radar: Heritage Bank data breach, new State Department unit tackles cyber threats, LA Metro disruptions. The post In Other News: Palo Alto Recruiter Scam, Anti-Deepfake Chip, Google Sets 2029 Quantum Deadline appeared first on SecurityWeek. more…

OpenAI Launches Bug Bounty Program for Abuse and Safety Risks

Through the new program, OpenAI will reward reports covering design or implementation issues leading to material harm. The post OpenAI Launches Bug Bounty Program for Abuse and Safety Risks appeared first on SecurityWeek. more…

TP-Link Patches High-Severity Router Vulnerabilities

The security defects could be used to bypass authentication, execute arbitrary commands, and decrypt configuration files. The post TP-Link Patches High-Severity Router Vulnerabilities appeared first on SecurityWeek. more…

Scientists discover bizarre new states inside tiny magnetic whirlpools

Researchers have uncovered a new way to generate exotic oscillation states in tiny magnetic structures—using only minimal energy. By exciting magnetic waves, they triggered a delicate motion that produced a rich spectrum of signals never seen before in this system. The finding challenges existing assumptions and could help connect different types of technologies, from conventional […] more…

AI regulations are already out of date — IT leaders need to think ahead

Most AI regulations passed in the last few years are already irrelevant, but enterprises should think ahead with rudimentary governance plans for quicker compliance, said legal experts in two panel discussions at Nvidia’s GTC developer show last week. Current AI regulations target frontier models, high-risk models, and transparency. They typically focus on LLMs and the […] more…

RSAC 2026 Conference Announcements Summary (Days 3-4)

A summary of the announcements made by vendors on the third and fourth days of the RSAC 2026 Conference. The post RSAC 2026 Conference Announcements Summary (Days 3-4) appeared first on SecurityWeek. more…

Anthropic wins reprieve against US DoD ban, buying time for contractors to assess AI supply chains

The Pentagon’s attempt to brand Anthropic a supply chain risk was “likely both contrary to law and arbitrary and capricious,” a US federal judge wrote in a ruling halting a ban on use of Anthropic’s products in defense contracts. In granting Anthropic a preliminary injunction against the ban, US District Judge Rita Lin of the […] more…

Coruna iOS Exploit Kit Likely an Update to Operation Triangulation

Coruna contains the updated version of a kernel exploit used in Operation Triangulation three years ago. The post Coruna iOS Exploit Kit Likely an Update to Operation Triangulation appeared first on SecurityWeek. more…

The ‘AI slop’ backlash kills Sora

OpenAI just killed Sora. That’s an amazing development. When the company rolled out the video-creation site, and later the app, reviewers called it a trailblazer because it combined video creations with sound effects, spoken dialog, and the ability for users to generate a specific character using a reference image and reuse them in multiple videos […] more…

Don’t sleep on this powerful new Chrome security booster

When it comes to staying safe online, the teensiest shred of common sense goes an impressively long way. That’s absolutely true on Android, as I’ve been preaching for more years than I can even remember at this point — and it’s true on the web, too, especially when you’re working within the desktop browser you […] more…

CISA Flags Critical PTC Vulnerability That Had German Police Mobilized

Police in Germany physically warned organizations about the critical PTC Windchill vulnerability tracked as CVE-2026-4681. The post CISA Flags Critical PTC Vulnerability That Had German Police Mobilized appeared first on SecurityWeek. more…

« Older posts