Android 17 to expand banking scam call and privacy protections
Android 17 to expand banking scam call and privacy protections By Bill Toulas May 12, 2026 01:00 PM Android 17, expected to roll out next month, will introduce several security and…
Search
Top stories
New Rokarolla Android malware targets 217 banking, crypto apps
…When launched on the device, Rokarolla requests Accessibility service permissions, as well as access to notifications, SMS, and calls, researchers at mobile security company Zimperium reveal in a report today. Communication with…
NFCShare Android malware spreads via fake banking app updates on GitHub
…The malware steals the card number, type, expiry date, and a 4-digit PIN entered by the victim under the pretense of a security step, and exfiltrates it to the attacker’s…
Cisco warns of unpatched SD-WAN zero-day exploited in attacks
…Cisco's Product Security Incident Response Team (PSIRT) became aware of CVE-2026-20245 exploitation in June after Google Cloud cybersecurity subsidiary Mandiant reported the flaw but did not share any details…
Discord rolls out end-to-end encryption on voice, video calls
…No opt-in required.” - Discord DAVE was first introduced in September 2024 , developed with assistance and auditing from Trail of Bits, to secure audio and video calls, group chats, voice channels, and…
Over 73,000 French govt employees affected in Tchap messenger breach
…In May, French authorities also arrested a 15-year-old suspected of selling data stolen in an April cyberattack on ANTS (Agence nationale des titres sécurisés), the country's agency for issuing…
Instagram users locked out after Meta AI abused to steal accounts
…After changing the email address, the attacker could initiate a password reset process and receive the required security code for gaining access to the account. Some online reports claim that the @e…
SHub macOS infostealer variant spoofs Apple security updates
SHub macOS infostealer variant spoofs Apple security updates By Bill Toulas May 18, 2026 05:42 PM A new variant of the ‘SHub’ macOS infostealer uses AppleScript to show a fake security…
GitHub confirms breach of 3,800 repos via malicious VSCode extension
…The company has since removed the unnamed trojanized extension from the VS Code marketplace and has secured the compromised device. "Yesterday we detected and contained a compromise of an employee device involving…
Credit card theft campaign abuses Stripe to host stolen payment info
…The new malware family was discovered by researchers at ecommerce security company Sansec, who found that the malicious code is loaded from a Google Tag Manager (GTM) container and executes on every…