News Archives

New Chrome Vulnerability Let Malicious Extensions Escalate Privileges via Gemini Panel

Researchers revealed a patched Chrome flaw (CVE-2026-0628) that could let malicious extensions hijack the Gemini side panel to escalate privileges and access local files, camera, microphone, and screenshots. Google fixed it in January 2026.

March 3, 2026

DoJ Seizes $61 Million in Tether Tied to Pig-Butchering Crypto Scams

The U.S. Department of Justice announced the seizure of $61 million in Tether connected to pig-butchering crypto scams. The funds were traced to wallets used for laundering stolen investor proceeds. Tether says it has frozen $4.2 billion tied to illicit activity, including nearly $250 million linked to scam networks since June 2025.

February 28, 2026

Pentagon Labels Anthropic a Supply-Chain Risk After Talks Collapse Over Military Use of AI

The Pentagon has labeled AI startup Anthropic a supply-chain risk after talks broke down over restrictions on using its Claude model for mass domestic surveillance and autonomous weapons. The move has sparked a political and industry dispute involving the White House, the Defense Department, Anthropic, and other AI firms.

February 28, 2026

Manual Workflows Threaten National Security

A look at how continued reliance on manual data transfers in defense and government creates strategic vulnerabilities, why this practice persists, and the automated controls — the Cybersecurity Trinity — needed to secure sensitive flows.

February 26, 2026

SLH Reportedly Paying $500–$1,000 Per Call to Recruit Women for IT Help Desk Vishing

A cybercrime collective known as SLH is reportedly paying $500–$1,000 per call to recruit women for voice‑phishing operations aimed at IT help desks. The group uses scripted social engineering, legitimate cloud services, and tunneling tools to bypass MFA and exfiltrate data.

February 26, 2026

Lazarus Group Deploys Medusa Ransomware in Attacks on Middle East Target and U.S. Healthcare

Broadcom’s Symantec and Carbon Black Threat Hunter Team links North Korea’s Lazarus Group to Medusa ransomware activity against a Middle Eastern target and an attempted hit on a U.S. healthcare provider. The report outlines tools, historical context, and a possible shift by DPRK operators toward third-party RaaS offerings.

February 25, 2026