Cybersecurity researchers have flagged a new campaign targeting Minecraft players via YouTube to spread malware capable of gaining control of victims’ systems. The Minecraft-focused malware-as-a-service (MaaS) campaign has been codenamed Weedhack by McAfee Labs, stating the activity has been active since January 2026 and impersonates Minecraft clients and mods toRead More »Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Content

Google on Monday released patches for 124 security vulnerabilities impacting its Android operating system for the month of June 2026, including one high-severity flaw in the Framework component that has come under active exploitation. Tracked as CVE-2025-48595 (CVSS score: 8.4), the security flaw has been described as a case ofRead More »Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited

The Russian hacking group known as Gamaredon has been attributed to the continued exploitation of a WinRAR vulnerability to deliver multiple malware families aimed at data theft and propagation. Per Sekoia, the activity involves the weaponization of CVE-2025-8088, a path traversal flaw in WinRAR, to launch an HTML Application payloadRead More »Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The vulnerability, CVE-2024-21182 (CVSS score: 7.5), allows an unauthenticated attacker with network access to take control of susceptibleRead More »Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation

President Trump has signed an executive order requesting AI companies to show models to the federal government. Security experts discuss. 

Hackers deceived Instagram’s AI chatbot, prompting it to provide access to user accounts.