News World That's Worth

  The "Coruna" Breach: How a U.S. State-Grade Spyware Fell into the Hands of Crypto-Thieves A chilling report from the Google Threat Intelligence Group and cybersecurity firm iVerify has uncovered a highly sophisticated iPhone hacking toolkit. Known as " Coruna " this professional-grade software is believed to have originated within the U.S. government for high-level espionage, but it has now "leaked" into the wild, fueling a massive wave of digital asset theft by organized cybercrime groups. Technical Sophistication: 23 Zero-Day Exploits Coruna is not your average malware; it is a "state-grade" weapon packed with 23 distinct exploits . Researchers found that the toolkit can compromise iPhones running iOS 13 through iOS 17.2.1 . The Attack Vector: Hackers utilize malicious websites (primarily in Chinese) to distribute the malware. Seamless Infection: A simple visit to an infected page triggers an automated system check. If the device is vul...

Global Alert: Critical WinRAR Zero-Day (CVE-2025-8088) Exploited by Multiple State-Sponsored Groups The Google Threat Intelligence Group (GTIG) has issued a formal warning regarding a high-severity vulnerability in WinRAR , identified as CVE-2025-8088 . The flaw is currently being actively exploited by a wide range of threat actors, ranging from common cybercriminals to sophisticated state-sponsored espionage groups. The Vulnerability: Path Traversal Execution The flaw affects WinRAR version 7.12 and older . It is a Path Traversal vulnerability that allows attackers to force the application to extract malicious files into unauthorized locations on a user's system such as the Windows Startup folder . By simply opening a specially crafted archive file, a user unknowingly triggers the malware to embed itself within the system, allowing it to execute automatically upon the next reboot. How the Attack Unfolds Hackers typically use social engineering tactics, disguising malicious paylo...

The Infostealer Apocalypse: 149 Million Logins Leaked via Massive Malware Database In an era where convenience drives us to store everything online, our digital lives are more vulnerable than ever. Cybersecurity researcher Jeremiah Fowler recently uncovered a massive, unprotected 96 GB database containing over 149,404,754 unique login credentials . Unlike typical data breaches where a single website is hacked, this data was harvested directly from victims' devices using Infostealer Malware . A Treasure Trove for Cybercriminals

Current cryptocurrency All the outbreaks Even the creators of the malware. That is starting to change the user's data for ransom. To install malware the machine to dig a mine instead. FortiGuard Labs research unit affiliated security company Fortinet discovered that the hacker group behind the malware ransom VenusLocker modify the new guidelines. Change is bringing malware to infected PCs. Digging for Monero.

Check Point security firm detected a number of Android apps at least 50 samples of malware and escape the monitoring of Google up on the Play Store. Check Point called the ExpensiveWall samples of malware, because it would apply to income paid SMS services from smartphone users from Check Point's statistics found that someone has downloaded the app this group then to 21.1-5.9 million. The latest Check Point problem to Google and Google delete all apps all. People who install these apps go, then it is necessary to remove itself. Most of the apps Camera, Wallpaper, Ringtone, horoscope.

Microsoft releases patches on a regular cycle in September. Critical vulnerabilities this month by a total of 25 vulnerabilities and the importance of the 54 vulnerabilities CVE-2017-8759 reader, SOAP WSDL support for data errors resulting files to run malicious code in them. The FireEye stated that the found files "Проект.doc" (MD5: fe5c4d6bb78e170abf5cf3741868ea4c). This vulnerability FINSPY to load malware into the victim's machine.

Hyrum Anderson researchers from security firm Endgame showcases research use AI to create malware that antivirus can not catch. The concept of this is to put the original malware binary, khotman adapted little by giving AI experiment, find a way to convert the probability that escapes detection until it will be the best way, like zero fill. Fill the random bytes. Renamed some in files, etc. This AI take train 15 hours with sample code, 100 000 samples. The result is that the AI could create a malware that has the chance of survival up to 60% detection (Not saying that test with an antivirus?).

Patrick Wardle researchers from the company Synack report to malware related to malware Fruitfly discovered before this page. By this the Mac's malware at least 5 years. And now there is little MAC still stuck 400 machine. Wardle found malware sample and decode the domain that the malware trying to reach out. Then he will experiment with domain registration and set up servers. There are more than 400 computer finds the machine contact came immediately by computers that connect a computer in his home in the U.S., mostly.

Darktrace security company indicated that a start of new forms of malware discoveries that bring the AI techniques used to make malware can learn environment and disguised slick than the original. Nicole Eagan, CEO of Darktrace say that the malware behavior modification, they will keep in the system without being detected for as long as possible. However, this group of malware not yet full, but the AI stage began to pick up some work. Another issue that's interesting is that these malware were found in developing countries than developed countries because the Giants in developed countries with strong it over. Result in a hacker turned to test the malware itself in a country that is not interested in cyber security so much. An example is the famous hacking Bangladesh's Central Bank later Symantec found attacks the same format is used in another 31 countries.