Browsing: Computing Security

A critical vulnerability in a popular WooCommerce plugin is being actively exploited to upload malware and possibly take over entire websites, security experts have warned.

Security researchers from Elastic Security Labs have discovered a new Brazilian banking malware campaign that uses browser extensions to compromise users and steal sensitive information.

Hackers have a new phishing lure – the automated voicemail transcript notification, and have already used it against thousands of organizations already, sending tens of thousands of malicious emails.

A swarm of OpenAI agents attacked RubyGems, a package manager for the Ruby programming language, uploading thousands of malicious packages until they were eventually cut off. No one really knows what the agents’ endgame was, but it appears they were using a nuclear bomb to kill a fly.

Carnegie Mellon University’s CERT Coordination Center has warned Skullcandy’s Dime 3 wireless earbuds will accept a Bluetooth pairing request from a stranger’s device without the owner doing anything.

A browser extension for Twitch was harvesting people’s OAuth tokens and sending them to a Russian-owned server. The move was deliberate, but whether or not it was malicious is not that easily determined.

AI voice cloning has reached the point where scammers can convincingly imitate human voices — and worryingly, research suggests we’re not particularly good at telling the difference.

Digital banking platform Revolut was tricked into giving away a treasure trove of sensitive customer data to hackers, and it is now coming back to bite it.

A £3 Wi-Fi extender bought through Temu has exposed security problems that challenge the idea of cheap connected devices being simple bargains.

A data leak of 153 million US drivers licenses is said to have been shared on a Russian cybercrime forum, with US Secretary of Defense Pete Hegseth among those leaked prompting an FBI investigation.