ZloyRAT Hides in a Fake Android Fuel Map and Radar
F6 traced ZloyRAT droppers behind fuel-map, radar and VPN lures. Learn why a normal website does not make the installed Android app safe.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
November 13, 2026
Latest reports
BlackX Bootkit Found a Trust Gap on Patched Windows PCs
BlackX reached patched Windows PCs that still trusted old boot components. The reported campaign shows why Secure Boot revocation and recovery planning matter.
Aokigahara Stealer Targets AI Sessions and Developer Keys
Aokigahara collects local AI sessions, Git and cloud credentials. What the October 23 research proves, and what to revoke after a Windows infection.
Meta’s $25B Privacy Penalty Exposes Facebook’s Broken Promises
A New Mexico judgment details Facebook’s app-access exceptions, limited data audits and deletion promises. What the $25 billion penalty actually means.
Tracebit Context Bombs Send AI Attackers Into Dead Ends
Tracebit tested deceptive documents and fake services against AI attackers. The AWS experiment shows how wasted work differs from preventing a real breach.
BUGSTER Used AI to Steal Thousands of University Records
Unit 42 links BUGSTER to a university database theft. The evidence separates confirmed stolen records from AI-generated attack plans and unfinished VoIP fraud.
FlashHole: Lazarus Turned Security Software Into a Way In
Lazarus used tailored portfolio sites, CrossWeb EX and in-memory malware in FlashHole. What the investigation establishes—and what remains unknown.
PHP2Shell Attacks: Update the Runtime Behind Your Website
PHP has patched two critical flaws as Cloudflare observes attack attempts. Check the fixed releases, vendor backports and PHP runtime actually serving your website.
Fake Amazon Music Deal Targets YouTube Creators
A fake Amazon Music portal uses real YouTube statistics to sell a false sponsorship, then collects Google passwords. See the sign-in trap and recovery…