Poper Blocker Collects AI Chats Through Rules Delivered After Installation
Researchers found Poper Blocker collecting browser history and AI chats. The case shows how delayed remote rules complicate extension privacy checks.
MSP360 Phishing Turns One Fake Invitation Into Two Remote-Access Channels
Microsoft traced fake invitations and PDF lures to MSP360, then ScreenConnect. Why UAC mattered and removing one remote tool may leave another.
iPhone Duo Preorder Trap Starts a DarkSword Attack Before You Submit
A fake iPhone Duo offer loads DarkSword before the form is submitted. What the research proves, what remains unknown, and why the iOS update matters.
Generic ML PUA: Virus, Unwanted App, or False Positive?
Understand the Sophos Generic ML PUA alert, remove unwanted software with Gridinsoft Anti-Malware, and investigate uncertain files before allowing them.
Dodo Pizza Cyberattack Puts Customer Addresses and Order Details at Risk
Dodo Pizza says a September 27–28 cyberattack may have exposed customer contact details and orders. Here is what its notice confirms about data and logouts.
NeedyMantis Hides Its Next Stage Behind Familiar DLL Names
Microsoft traces NeedyMantis through planted DLLs, an extensionless archive and a fake PowerShell filename. Here is what the evidence does—and does not—show.
KB5002907 Paused After Office 2016 and 2019 Lose Activation or Disappear
Microsoft paused KB5002907 after some Office 2016 and 2019 installations lost activation or were removed. Follow the official recovery path for each symptom.
Belnet Email Breach Exposes Messages and Attachments From Outside Senders
Belnet says attackers copied incoming emails and attachments. Check the July–September exposure window and what it means for outside senders.
Wagenius Gets 70 Months for Phone-Record Hacking and Extortion
Cameron Wagenius received 70 months for telecom hacking and extortion. The case shows why stolen call records matter even without recordings.
WordPress Template Flaw Enters KEV as Attacks Reach File Writes
CISA lists the exploited WordPress template flaw. Learn why theme and PHP conditions matter, which updates fix it, and what server evidence to check.
Kiteworks Restores Systems After Precautionary Shutdown
Kiteworks lifted its shutdown recommendation and reported a fix for a limited-capability flaw. Hosted systems, self-managed restart, and Advanced Forms support.
Ledger Phishing Ads Turn a Fake Device Check Into a Seed-Phrase Trap
Google ads led Ledger users through cloud redirects to a fake device check. Its recovery-phrase error appeared after the words had already been sent.
