Storm-3168 Azure Attack: What Failed, What Survived
Microsoft’s Storm-3168 case shows why failed deletion requests, application permissions and separate data protections matter after a cloud intrusion.
Introducing Gridinsoft Web Protection for Android
Gridinsoft’s new Android app helps block known phishing and scam websites with one-tap control. Try it free for 14 days, with no card required.
OnePlus App-to-Root Chain: Researcher Confirms a OnePlus 15 Fix
An installed app crossed two privileged services. Check the confirmed OnePlus 15 fix and the limits of the research.
Coinbase Impersonator Stole $16M Through “Safe” Wallets
A new sentence exposes how fake Coinbase support moved victims’ crypto into wallets the scammer could access.
Kothamine Carries Hostile Commands Through a Legitimate Tunnel
Kothamine uses tailcat for encrypted remote control. The research shows why localhost traffic and a legitimate networking tool do not prove a PC is safe.
Example Domains in Developer Docs Lead to ClickFix and Scams
Manifold found a Windows ClickFix lure and intermittent Mac scams behind familiar example domains. The code references are not proof of compromised repositories.
MAX Audit Finds Server Controls That Differ Between Accounts
InterSecLab traced per-account settings, VPN blocking and contact uploads in MAX for Android. The audit separates observed behavior from dormant code.
RemotePanel and BoundSiphon Split a ClickFix Attack in Two
A ClickFix command installs persistent RemotePanel access and the BoundSiphon stealer. Why device cleanup and account recovery are separate tasks.
Bitget Reports $351.6 Million Wallet Incident, Pauses Withdrawals
Bitget reports unauthorized wallet transfers and pauses withdrawals. What its notice confirms, what remains unknown, and how to verify support messages.
Storm-2570 Uses Four Ransomware Brands—and the Same Access Tools
Microsoft links Storm-2570 to four ransomware families. Repeated remote access, credential theft and cloud uploads reveal warning signs before encryption.
Claude Max Giveaway Fakes a Google Window to Steal Logins
A fake Claude Max gift draws its own Google sign-in window. See the browser boundary that exposes the trap and what to do after entering credentials.
HeyCyan Smart Glasses Test Exposes an Open Photo Album
Check the app, firmware and access controls before trusting smart glasses with private recordings. Encryption and owner approval are separate safeguards.
