Davey Winder

A vast compilation of 56 million email addresses and 124 million unique passwords has been added to the Have I Been Pwned database. This isn't a new breach but an alarming aggregation of credentials from countless past infostealer malware attacks. These "infostealers" are widespread, with billions of records compromised, enabling cybercriminals to launch credential stuffing attacks, particularly targeting users who reuse passwords. Experts urge immediate action: check HIBP for your details, change any compromised passwords, enable two-factor authentication, and adopt a password manager for unique, strong credentials. Consider switching to passkeys where available for superior security.

As Google confirms yet another security update for the world's most popular web browser, with an estimated 3.8 billion users across multiple

Gmail, with an estimated 3 billion users worldwide , has become a crucial email platform that many rely on every day.

Security experts have confirmed that a new infostealer has been used in attacks against macOS systems.

The Federal Security Service of the Russian Federation, the successor to the Soviet KGB and better known as the FSB, has deployed its Center 16

Hot on the heels of the biggest ever Chrome update that saw Google fix 429 security vulnerabilities, Microsoft has also been breaking records.

Google Chrome consistently rolls out weekly security updates, yet a recurring concern is the high volume of critical memory vulnerabilities. The recent Chrome 150.0.7871.124/.125 patch addresses 15 flaws, with 10 stemming from memory issues such as use-after-free, heap buffer overflows, and uninitialized use. These critical vulnerabilities pose serious risks, potentially causing data corruption, arbitrary code execution, privilege escalation, and information leaks. Google promptly confirmed the update, now deploying across Windows, Mac, Linux, and Android, urging immediate user action. Technical specifics are temporarily withheld until widespread adoption of the fix. Users must ensure their browser is updated, automatically or manually, to mitigate these significant threats.

A new and ongoing password-stealing campaign targeting LastPass users has been confirmed by the password manager's Threat Intelligence Mitigation and Escalations team.

Within the space of just 48 hours, Google has now issued two critical security updates for the world's most popular browser.

Be careful what you type: macOS users are warned that new ClickLock malware will kill apps and trigger an 83-hour password-entry loop to steal credentials.