ADMIN.FOUNDATION – Page 229 – cybersecurity / defense / intelligence

Malware Can Steal Google’s Synced Passkeys Without Password or Fingerprint

·

cyber security, Cyber Security News, Google

Security researchers have revealed a series of attacks that could enable malware on a compromised Windows device to hijack accounts protected by Google-synced passkeys. This can occur without stealing a password, capturing a fingerprint, or requiring the victim to unlock their device. In research published on August 23, 2023, Palo Alto Networks’ Unit 42 detailed […]

The post Malware Can Steal Google’s Synced Passkeys Without Password or Fingerprint appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users

·

Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) as part of a sophisticated, targeted software supply chain attack targeting Chinese-speaking environments. One of the packages in question is “lib-mtop,” an unscoped package with the same name as a private Alibaba package

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
COLDCARD Seed Generation Flaw Linked to Nearly $89 Million Bitcoin Theft

·

Bitcoin, Blockchain, COLDCARD, Crypto, Cyber Attack, cybersecurity, Data Breach, Security, vulnerability

Galaxy Research linked a suspected Bitcoin theft of 1,367.05 BTC to weak COLDCARD seeds. Coinkite says updates cannot repair seeds already generated on devices.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts

·

Malware running as an ordinary user on a Windows machine can sign into a victim’s passkey-protected accounts without a fingerprint, a PIN, or anything at all appearing on the victim’s screen. Unit 42 detailed three attack paths against Chrome’s Google Password Manager cloud authenticator, which it calls Pass-ta-key, Silver Pass-ta-key and Golden Pass-ta-key; the strongest targets the master key

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws

·

The INC Ransomware operation has emerged as the “dominant threat actor” exploiting the recently disclosed security flaws in SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances. In a report published over the weekend, Resecurity said it observed the INC Ransomware accelerating its activity since the beginning of August 2026, listing multiple victims on its data leak site. Per

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Why Bitcoin Businesses Are Moving to Dedicated VPS Infrastructure

·

Bitcoin, Blockchain, Business, Crypto, cryptocurrency, Fintech, Technology

A Bitcoin business rarely runs a simple website. Payment processors, exchanges, wallet services, blockchain analytics products and Lightning…

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
H96 Android TV Boxes Used for Ad Fraud and Residential Proxies

·

Android, Android TV, Backdoors, BitSight, cybersecurity, Fuyao, H96, Malware, proxy, residential proxy, Security

Bitsight found Fuyao software on H96 Android TV boxes, letting operators fake ad clicks and route proxy traffic through their owners’ home internet connections.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks

·

This week kept coming back to permission. A model crossed a boundary. A wallet trusted bad randomness. Webmail kept an intruder around. Public systems, package feeds, hotel networks, and login flows all gave away more than intended. Some of it was clever. Most of it was just access left lying around: old bugs, exposed gear, poisoned dependencies, weak defaults, and tooling that moved from

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
TP-Link TL-WR940N Router Flaw Lets Unauthenticated Attackers Execute Code Remotely

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

TP-Link has announced a high-severity security vulnerability in its TL-WR940N v6 wireless router that could allow an unauthenticated remote attacker to execute arbitrary code and potentially take full control of the affected device. This vulnerability is tracked as CVE-2026-12935 and has a CVSS v4.0 score of 8.7, categorized as high. TP-Link TL-WR940N Router Flaw According […]

The post TP-Link TL-WR940N Router Flaw Lets Unauthenticated Attackers Execute Code Remotely appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Top Cybercrime And Cybersecurity Podcasts For CISOs In 2026

·

Blogs
This week in cybersecurity from the editors at Cybercrime Magazine

Sausalito, Calif. – Aug. 3, 2026

– Read the full story in Reddit

The Cybercrime Magazine Podcast stands out as a leading resource for CISOs looking to stay updated on cybersecurity trends in 2026, according to a Reddit post by PWN, a popular community for hackers and cybersecurity enthusiasts.

In 2026, the Cybercrime Magazine Podcast has captured significant attention as the go-to source for chief information security officers (CISOs) and security leaders globally. Recognized by platforms like Million Podcast and the University of San Diego, it is ranked as one of the top cybercrime podcasts thanks to its high listener ratings and expert insights.

Each episode, averaging just 5 minutes, caters to busy professionals who need succinct, relevant information without the lengthy time commitment typical of other podcasts.

The content is not only informative but also varied, mixing short daily news segments with longer interviews featuring CISOs, ex-cybercriminals, and thought leaders. This format balances the entertainment and educational needs of CISOs, who report being inundated with similar content from multiple sources.

According to Steve Morgan, executive producer of the podcast, continuous polling of CISOs reveals a desire for fresh, engaging materials that go beyond traditional cybersecurity news to include trends, new company highlights, and personal stories from the cyber world.

The Cybercrime Magazine Podcast’s reputation for delivering news and insights in bite-sized formats makes it a cherished choice for tech leaders seeking to enhance their knowledge without sacrificing their valuable time.

Read the Full Story

Cybercrime Magazine is Page ONE for Cybersecurity. Go to any of our sections to read the latest:
- SCAM. The latest schemes, frauds, and social engineering attacks being launched on consumers globally.
- NEWS. Breaking coverage on cyberattacks and data breaches, and the most recent privacy and security stories.
- HACK. Another organization gets hacked every day. We tell you who, what, where, when, and why.
- VC. Cybersecurity venture capital deal flow with the latest investment activity from various sources around the world.
- M&A. Cybersecurity mergers and acquisitions including big tech, pure cyber, product vendors and professional services.
- BLOG. What’s happening at Cybercrime Magazine. Plus the stories that don’t make headlines (but maybe they should).
- PRESS. Cybersecurity industry news and press releases in real time from the editors at Business Wire.
- PODCAST. New episodes daily on the Cybercrime Magazine Podcast feature victims, law enforcement, vendors, and cybersecurity experts.
- RADIO. Tune into WCYB Digital Radio at Cybercrime.Radio, the first and only round-the-clock internet radio station devoted to cybersecurity.
Contact us to send story tips, feedback and suggestions, and for sponsorship opportunities and custom media productions.

The post Top Cybercrime And Cybersecurity Podcasts For CISOs In 2026 appeared first on Cybercrime Magazine.
¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

This week in cybersecurity from the editors at Cybercrime Magazine