Skip to content
China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom Networks

China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom Networks

A long-term and ongoing campaign attributed to a China-nexus threat actor has embedded itself in telecom networks to conduct espionage against government networks. The strategic positioning activity, which involves implanting and maintaining stealthy access mechanisms… 

Read More »China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom Networks
Apple made strides with iOS 26 security, but leaked hacking tools still leave millions exposed to spyware attacks

Apple made strides with iOS 26 security, but leaked hacking tools still leave millions exposed to spyware attacks

The common assumption among iPhone security experts has been that finding vulnerabilities and developing exploits for iOS was difficult, requiring a lot of time, resources, and teams of skilled researchers to break through its layers… 

Read More »Apple made strides with iOS 26 security, but leaked hacking tools still leave millions exposed to spyware attacks
A major hacking tool has leaked online, putting millions of iPhones at risk. Here’s what you need to know

A major hacking tool has leaked online, putting millions of iPhones at risk. Here’s what you need to know

Security researchers have uncovered a series of cyberattacks targeting Apple customers across the world. The tools used in these hacking campaigns have been dubbed Coruna and DarkSword, and they have been used by both government… 

Read More »A major hacking tool has leaked online, putting millions of iPhones at risk. Here’s what you need to know
Claude Extension Flaw Enabled Zero-Click XSS Prompt Injection via Any Website

Claude Extension Flaw Enabled Zero-Click XSS Prompt Injection via Any Website

Ravie LakshmananMar 26, 2026Browser Security / Vulnerability Cybersecurity researchers have disclosed a vulnerability in Anthropic’s Claude Google Chrome Extension that could have been exploited to trigger malicious prompts simply by visiting a web page. The… 

Read More »Claude Extension Flaw Enabled Zero-Click XSS Prompt Injection via Any Website