⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, ZeroThe Hacker News·Oct 14, 10:56 UTC · Oct 14, 2025Malware in the wildCVE-2025-2104360
Apple iPhone Air and iPhone 17 Feature A19 Chips With SpywareThe Hacker News·Sep 11, 08:54 UTC · Sep 11, 2025Malware55
Google Launches Android Spyware Forensics Tool for HighInfosecurity Magazine·May 14, 13:30 UTC · May 14, 2026Malware55
App on Google Play exploited Android bug to deliver spywareHelp Net Security·Jan 19, 13:08 UTC · Jan 19, 2024Malware in the wildCVE-2019-221560
Researchers Uncover BankBot-YNRK and DeliveryRAT Android Trojans Stealing Financial DataThe Hacker News·Nov 3, 11:14 UTC · Nov 3, 2025Malware30
4G Calling (VoLTE) flaw allowed to locate any O2 customer with a phone callSecurity Affairs·May 20, 18:34 UTC · May 20, 2025Malware30
Mercenary mayhem: A technical analysis of Intellexa's PREDATOR spywareCisco Talos·May 25, 12:02 UTC · May 25, 2023MalwareCVE-2021-37973CVE-2021-37976CVE-2021-38000+2 CVEs60
Unless users take action, Android will let Gemini access thirdArs Technica · Security·Jul 7, 23:46 UTC · Jul 7, 2025Malware30
Experts observed approximately 120 malicious campaigns using the Rafel RATSecurity Affairs·Jun 24, 17:09 UTC · Jun 24, 2024Malware42
Google and Amnesty International teamed up to make it harder for spyware vendors to hideCyberScoop·May 12, 17:00 UTC · May 12, 2026Malware in the wild60
Google's Android Apps Get Public Verification to Stop Supply Chain AttacksThe Hacker News·May 6, 10:41 UTC · May 6, 2026Malware55
Cloudflare acquires Zaraz to boost website speed without compromising securityHelp Net Security·Dec 9, 00:00 UTC · Dec 9, 2021Malware55
Amnesty International exposes Serbian police’s use of spyware on journalists, activistsCyberScoop·Dec 16, 13:52 UTC · Dec 16, 2024Malware30
NSO Group used WhatsApp exploits after the messaging app sued the spyware developer, court filing saysCyberScoop·Nov 15, 20:24 UTC · Nov 15, 2024Malware in the wild60
Meta details actions against eight spyware firmsCyberScoop·Feb 14, 16:35 UTC · Feb 14, 2024Malware in the wild60
Google: Governments need to do more to combat commercial spywareCyberScoop·Feb 6, 10:00 UTC · Feb 6, 2024Malware in the wild60
Will spyware maker NSO Group's struggles reduce use of its eavesdropping tech? Critics doubt it.CyberScoop·Aug 22, 18:26 UTC · Aug 22, 2022Malware in the wild60
Apple sues NSO Group, spyware vendor known for helping governments hack criticsCyberScoop·Nov 23, 20:30 UTC · Nov 23, 2021Malware in the wild60
Religious, political leaders in Togo allegedly targeted with NSO Group spywareCyberScoop·Aug 3, 22:06 UTC · Aug 3, 2020Malware in the wild60
Moroccan journalist targeted by NSO Group spyware, Amnesty International saysCyberScoop·Jun 22, 18:05 UTC · Jun 22, 2020Malware in the wild60
Facebook wanted to purchase NSO Group spyware to surveil users, court documents allegeCyberScoop·Apr 3, 19:09 UTC · Apr 3, 2020Malware in the wild60
'Pegasus for Android': Newly discovered spyware allows attacker to record conversationsCyberScoop·Apr 4, 22:11 UTC · Apr 4, 2017Malware in the wild60
Friday Squid Blogging: Roasted Squid with Tomatillo SalsaSchneier on Security·Jan 29, 08:02 UTC · Jan 29, 2020Malware55
Apple’s new Memory Integrity Enforcement system deals a huge blow to spyware developersCyberScoop·Sep 10, 13:38 UTC · Sep 10, 2025Malware in the wild60
Google Stops Collecting Location Data from MapsSchneier on Security·Dec 26, 12:03 UTC · Dec 26, 2023Malware30
ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New StoriesThe Hacker News·Jun 4, 14:00 UTC · Jun 4, 2026Malware in the wildCVE-2026-20230160
Sneaky Credit Card Skimmer Disguised as Harmless Facebook TrackerThe Hacker News·Apr 12, 09:26 UTC · Apr 12, 2024Malware42
Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection and Data TheftThe Hacker News·Mar 9, 14:35 UTC · Mar 9, 2026Malware42
New Atomic macOS Stealer Campaign Exploits ClickFix to Target Apple UsersThe Hacker News·Jun 7, 05:50 UTC · Jun 7, 2025Malware42
⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and MoreThe Hacker News·Apr 6, 12:46 UTC · Apr 6, 2026Malware in the wildCVE-2026-5281CVE-2026-3502CVE-2026-35616+1 CVEs60
Fake Discount Sites Exploit Black Friday to Hijack Shopper InformationThe Hacker News·Nov 19, 05:08 UTC · Nov 19, 2024Malware30
Spyware campaigns using zero-days found in Italy, Malaysia, Kazakhstan, UAEThe Record·Mar 29, 13:31 UTC · Mar 29, 2023MalwareCVE-2022-42856CVE-2021-30900CVE-2022-3723+6 CVEs60
Cyber crooks' latest tricks for targeting Chrome usersHelp Net Security·Jun 26, 21:24 UTC · Jun 26, 2018Malware30
Report: Malware campaign linked to Chinese ad firm infects 250 million computersCyberScoop·Jun 2, 19:34 UTC · Jun 2, 2017Malware in the wild60
A review of prevalent web tracking services in 2023Kaspersky Securelist·Sep 24, 10:01 UTC · Sep 24, 2024Malware30
Researchers Uncover Hijack Loader Malware Using Stolen CodeThe Hacker News·Oct 21, 13:19 UTC · Oct 21, 2024Malware42
⚡ Weekly Recap: iPhone Spyware, Microsoft 0-Day, TokenBreak Hack, AI Data Leaks and MoreThe Hacker News·Oct 28, 08:29 UTC · Oct 28, 2025Malware in the wildCVE-2025-43200CVE-2025-32711CVE-2025-33053+24 CVEs260
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 FilesThe Hacker News·Jul 17, 08:56 UTC · Jul 17, 2026Malware130
Hackers Exploit WordPress Sites to Power NextThe Hacker News·Oct 10, 06:51 UTC · Oct 10, 2025Malware30