Search: “Socket Security”

752 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 266 Vulnerability 184 Exploit / PoC 71 Threat actor 46 Ransomware 46 Data breach 43 Industry 23 Phishing & fraud 20 Policy & legal 19 Research 8 Advisory 7 AI safety & security 5 Tools 5 AI industry 5

SeverityAll critical 203 high 340 medium 147 low 46 info 18

19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto

Socket found 19 malicious Chrome and Edge extensions, active since February 2024, stealing wallet seed phrases and credentials and draining crypto from about 80,000 users.

Socket researcher Karlo Zanki documented a cluster of 18 Chrome and one Edge extensions with wallet secret stealing and cryptocurrency draining capabilities, tracked as campaign Superior and possibly active since February 2024. The actor created 14 extensions and bought five legitimate ones, later pushing malicious updates; the largest, Enable Right Click & Copy, has roughly 80,000 installs across both browsers. The extensions maintain WebSocket C2 connections with endpoint rotation, strip CSP headers, and load 16 modules including multi-chain wallet drainers, hardware-wallet seed-phrase harvesters, credential grabbers, and ClickFix-style lures.

The Hacker NewsAug 28, 15:27 UTC · 19d agoMalware in the wild

Five Malicious Chrome Extensions Impersonate Workday and NetSuite to Hijack Accounts

The Hacker NewsJan 17, 08:27 UTC · Jan 17, 2026Threat actor

IT security and government services: Balancing transparency and security

Help Net SecurityApr 23, 13:52 UTC · Apr 23, 2026Ransomware

The UK’s secret iCloud backdoor request: A dangerous step toward Orwellian mass surveillance

Help Net SecurityFeb 13, 00:00 UTC · Feb 13, 2025Malware

Secure websites brought to you by the letter S

Help Net SecurityDec 20, 14:48 UTC · Dec 20, 2016Industry

Malicious Google Chrome Extensions Hijack Workday and Netsuite

Infosecurity MagazineJan 19, 12:30 UTC · Jan 19, 2026Data breach

Independent tests show why orgs should use third

CyberScoopApr 2, 14:35 UTC · Apr 2, 2025Exploit / PoC

9 Tips to Prevent WordPress Hacks in this Dangerous Digital World

Security AffairsFeb 7, 13:50 UTC · Feb 7, 2018Vulnerability

2017 ODNI Memo on Kaspersky Labs

Schneier on SecurityJul 23, 11:08 UTC · Jul 23, 2024Vulnerability

Ensuring best website security through SSL Certificate updates.

Security AffairsMar 30, 12:26 UTC · Mar 30, 2018Vulnerability

Attackers hijack Axios npm account to spread RAT malware

Security AffairsMar 31, 18:30 UTC · Mar 31, 2026Malware

Malicious PyPI Package "automslc" Enables 104K+ Unauthorized Deezer Music Downloads

The Hacker NewsFeb 27, 07:04 UTC · Feb 27, 2025Malware

10 npm Packages Caught Stealing Developer Credentials on Windows, macOS, and Linux

The Hacker NewsOct 29, 08:34 UTC · Oct 29, 2025Malware

Open VSX Supply Chain Attack Used Compromised Dev Account to Spread GlassWorm

The Hacker NewsFeb 2, 15:31 UTC · Feb 2, 2026Malware

Windows feature that resets system clocks based on random data is wreaking havoc

Ars Technica · SecurityAug 15, 00:00 UTC · Aug 15, 2023Industry2

Online shopping made safe and convenient

Kaspersky SecurelistDec 8, 11:52 UTC · Dec 8, 2011Phishing & fraud

TLS 1.3: Slow adoption of stronger web encryption is empowering the bad guys

Help Net SecurityApr 6, 00:00 UTC · Apr 6, 2020Vulnerability

TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files

The Hacker NewsMar 28, 06:25 UTC · Mar 28, 2026Malware

Facebook Open Sources Fizz — TLS 1.3 Library For Speed and Security

The Hacker NewsAug 7, 12:10 UTC · Aug 7, 2018Industry

TLS security: Past, present and future

Help Net SecurityMar 26, 10:22 UTC · Mar 26, 2019Vulnerability

Ticketbleed flaw in F5 Networks BIG-IP appliances are exposed to remote attacks

Security AffairsFeb 9, 18:04 UTC · Feb 9, 2017Vulnerability CVE-2016-9244

Risky Bulletin: Slovakia finds Russian backdoor in traffic speed cameras

Slovakia's NBU found an SMS-triggered backdoor in Russian-made NERO R-ONE traffic cameras, pausing a 279-unit deployment.

Slovakia's national security service NBU issued an alert against NERO R-ONE high-speed traffic cameras after finding a backdoor that grants shell and network access via SMS from hardcoded Russian phone numbers. The cameras are a rebranded version of the Russian CORDON PRO.M model by St. Petersburg firm Semicon, purchased via a Cyprus shell company under a €30 million EU-funded project. The report also found SecureBoot disabled, vulnerable web management, and unauthenticated live streams; the Interior Ministry paused deployment of 279 cameras pending independent assessment.