Researchers from Unit 42, the threat intelligence team at Palo Alto Networks, have discovered a previously unknown Android spyware family dubbed LANDFALL, which leveraged a zero-day vulnerability …

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

NSO Group is appealing a federal injunction banning it from using WhatsApp's infrastructure to deploy Pegasus spyware, arguing the order could force the company to shut down.

CISA issued an urgent alert: Commercial spyware is actively exploiting zero-click flaws and malicious QR codes to hijack messaging apps (Signal, WhatsApp) for espionage against government and civil society targets.

Researchers at Striker STAR Labs have detailed a new attack against agent-based browsers that can turn an ordinary

You didn’t click anything, but the hack has already begun. Inside the new ‘Aladdin’ exploit that turns the ads on your screen into…

For years, cybersecurity awareness campaigns have warned people not to click suspicious links, download unknown attachments, or visit shady…

Direct navigation—when a user manually types a website address into the browser—has become markedly more dangerous. Researchers at Infoblox have found that the vast majority of “parked” domains ar…

PrestaShop patches a 9.1 critical flaw (CVE-2025-61922) in the Checkout module. Attackers can hijack accounts via email. PoC available.

Google Project Zero uncovers a zero-click exploit on Pixel 9 in Jan 2026. Hackers can hijack the kernel via silent audio messages. Patch now!