Malware hiding in an NFT-based game app has managed to bypass Microsoft Defender and Google’s two-factor authentication (2FA), stealing $24k in cryptocurrency. The malware installs a malicious Chrome extension under the guise of Google Keep, allowing it to capture sensitive information. It was also found to disable itself when accessing devices in Russia, Ukraine, or Belarus, suggesting these locations as its possible origin.
This popular Windows utility for ZIP files has a dangerous vulnerability
Early versions of the 7-Zip file compression program are affected by a critical security flaw, first discovered in June. The flaw affects versions prior to