Yadullah Abidi

1 week ago | candid.technology | Yadullah Abidi

Hackers are abusing fake AI websites impersonating legitimate AI video generator tools to infect users with infostealer malware and backdoors around the world. The campaign is being run by a Vietnamese hacking group dubbed UNC6032 and has been active since at least mid-2024. The campaign was observed by security researchers at Mandiant, who claim they’ve discovered at least 30 different fake websites impersonating tools like Luma IA, Canva Dream Lab, and Kling AI, among others.

1 week ago | candid.technology | Yadullah Abidi

A security vulnerability in Microsoft OneDrive’s file picker has left the cloud storage users exposed to third-party apps. The file picker requests OAuth permissions, which in turn grant external apps access to the user’s entire drive rather than the specific files selected for download or upload.

1 week ago | candid.technology | Yadullah Abidi

Security researchers have discovered a new scam campaign that uses SEO poisoning to redirect unsuspecting employees to fake payroll sites. The hackers steal employee passwords by leading them to phishing pages, then use this access to swap out payroll accounts. The campaign was first observed by ReliaQuest security researchers in May 2025. The threat actors specifically targeted employee phones with a phishing page impersonating their respective organisation’s login portal.

1 week ago | makeuseof.com | Yadullah Abidi

Despite Google Chrome's monopoly over the web browser market, there are plenty of good alternatives you could try. Arc, one of the best Chrome alternatives, is being discontinued, but you still have better options available. Arc Closes Its Tabs for Good If you've been using Arc, you're already aware that The Browser Company (TBC) discontinued shipping new features for the browser some time ago. Currently, TBC only offers Chromium updates, bug fixes, and patches for security vulnerabilities.

1 week ago | candid.technology | Yadullah Abidi

Popular sports equipment manufacturer Adidas has disclosed a data breach after hackers gained access to a third-party customer service provider used by the company and stole customer data. The incident has been contained, and Adidas is working with security experts to investigate the issue. Adidas stated that the stolen data doesn’t include passwords, credit card numbers, or other payment-related information.