CyberInsider

Attackers behind the recent Revolut data exposure allegedly used compromised Italian government email accounts for months to submit fraudulent customer information requests, according to new findings from Duel and Hudson Rock. The hackers are also reportedly demanding 10,000 Bitcoin, worth about $782 million at the time of the demand, and have threatened to publish additional … The post Revolut hackers used infostealer to hijack Italian government emails appeared first on CyberInsider.

Apple has announced Apple Reference Image, a new iPhone photography mode designed to cryptographically prove that a photograph originated from a real camera sensor while preserving the photographer’s privacy. The opt-in feature will debut on the main cameras of the iPhone 18 Pro and iPhone 18 Pro Max, creating securely timestamped images whose capture and … The post Apple uses secure camera hardware to verify photos are real captures appeared first on CyberInsider.

Google has fixed a high-severity Pixel modem vulnerability that may already have been exploited in limited, targeted attacks. Tracked as CVE-2026-58704, the flaw was fixed as part of the September 2026 Pixel security update, which brings supported devices to the 2026-09-05 security patch level. Google disclosed the vulnerability in its September 15 Pixel Update Bulletin, … The post Google patches Pixel modem zero-day exploited in targeted attacks appeared first on CyberInsider.

Iranian state cyber actors are using Windows malware called CHOSEN BRICK to target dissidents, activists, and journalists, with capabilities that include stealing Telegram and WhatsApp browser data, emails, screenshots, and audio. The malware has been used internationally since at least 2025 and relies heavily on social engineering, while also using Telegram infrastructure for command-and-control. The … The post Iranian malware steals Telegram and WhatsApp data from targets appeared first on CyberInsider.

A proof-of-concept exploit named BrokenPipe abuses the Steam Client Service to elevate a standard Windows user to NT AUTHORITY\SYSTEM without displaying a UAC prompt or requiring administrator credentials. The issue was disclosed on GitHub by security researcher KillaBoi (@killa), who says Valve had been notified about the vulnerability since March. According to the researcher, the … The post Steam client flaw with no fix enables privilege elevation on Windows appeared first on CyberInsider.