LastPass Says ‘Do Not Enter Your Credentials’ As New Attack Confirmed

LastPass users are being warned not to respond to a security alert email that looks like it comes from the password manager but is part of a credentials-stealing attack.

Microsoft patches bug in video game Age of Empires II

The vulnerability in the decades-old game could have allowed hackers to take over victims’ computers with a malicious game invite.

Microsoft patches record number of security vulnerabilities, citing its use of AI

Microsoft’s monthly release of security fixes, dubbed Patch Tuesday, resolved a record 570 security vulnerabilities across the company’s product line, thanks to discoveries with AI.

US charges Russian ‘bulletproof’ web hosts over cyberattacks that netted $62M from cybercrime victims

The 2024 indictment, now unsealed, accuses three Russians and two web hosts of aiding hackers and profiting from cybercrime.

Google Confirms Yet More Chrome 150 Memory Security Updates

Another week, another slew of Google Chrome memory vulnerabilities. But what’s the difference between use-after-free, heap buffer overflow and uninitialized use flaws?

Russian hackers keep finding their way into critical networks through neglected routers

Russian state-backed hackers are exploiting neglected routers to access critical infrastructure networks, prompting agencies worldwide to urge organizations to replace outdated equipment and tighten basic network security.

Microsoft Warns 2 Zero-Days Already Exploited In Attacks: Update Now

Microsoft addresses 570 security flaws in a record-breaking Patch Tuesday rollout, including two zero-days already being used in attacks. Don’t waste time; update now.

Telegram’s shortlink domain is back online after day-long suspension

Telegram CEO Pavel Durov confirmed an outage in a tweet, saying that shortlinks to the messaging app had “stopped working.”

FBI Issues Warning As Russia’s FSB Center 16 Hackers Target Routers

Russia’s elite Center 16 hackers are attacking routers in the West, the FBI and other international security agencies have warned. Here’s how to stop them.

New Apple Password Stealer Bypassed MacOS Gatekeeper Without Warning

This Apple credential theft attack targeted your macOS login password while bypassing the built-in malware protection. Here’s what you need to know about CrashStealer.