iCloud Sender Spoofing Passed Email Authentication in Newly Disclosed Research
New iCloud research explains how forged sender addresses passed SPF, DKIM and DMARC. The flaws were fixed in December 2025; see what the checks prove.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
October 4, 2026
Latest reports
Car Apps Share VINs and Location: What a New Privacy Study Actually Found
Northeastern tested 21 cars and 30 apps. Seven apps sent personal identifiers to trackers; encrypted vehicle traffic revealed a different kind of evidence.
Poper Blocker Collects AI Chats Through Rules Delivered After Installation
Researchers found Poper Blocker collecting browser history and AI chats. The case shows how delayed remote rules complicate extension privacy checks.
MSP360 Phishing Turns One Fake Invitation Into Two Remote-Access Channels
Microsoft traced fake invitations and PDF lures to MSP360, then ScreenConnect. Why UAC mattered and removing one remote tool may leave another.
iPhone Duo Preorder Trap Starts a DarkSword Attack Before You Submit
A fake iPhone Duo offer loads DarkSword before the form is submitted. What the research proves, what remains unknown, and why the iOS update…
Dodo Pizza Cyberattack Puts Customer Addresses and Order Details at Risk
Dodo Pizza says a September 27–28 cyberattack may have exposed customer contact details and orders. Here is what its notice confirms about data and…
NeedyMantis Hides Its Next Stage Behind Familiar DLL Names
Microsoft traces NeedyMantis through planted DLLs, an extensionless archive and a fake PowerShell filename. Here is what the evidence does—and does not—show.
KB5002907 Paused After Office 2016 and 2019 Lose Activation or Disappear
Microsoft paused KB5002907 after some Office 2016 and 2019 installations lost activation or were removed. Follow the official recovery path for each symptom.
Belnet Email Breach Exposes Messages and Attachments From Outside Senders
Belnet says attackers copied incoming emails and attachments. Check the July–September exposure window and what it means for outside senders.