Blog – Page 232 – Cyber Mike

New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing

A malicious website can work out which sites you visit and which apps you open, using nothing but JavaScript and the timing of your SSD. The attack, called FROST, needs no native code, no extension, and no permission prompt.

You open the page, leave the tab sitting there, and it watches the drive for contention in the background.

Researchers at Graz University of Technology built it and

Check Point VPN Zero-Day Exploited in Qilin Ransomware Attacks

The authentication bypass vulnerability allows attackers to establish VPN connections without a valid password.

The post Check Point VPN Zero-Day Exploited in Qilin Ransomware Attacks appeared first on SecurityWeek.

Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts across 19 packages in the Python Package Index (PyPI) registry, as the Mini Shai-Hulud-style attacks continue to be refined and splintered to target specific ecosystems.

“The compromised releases shipped a *-setup.pth file that attempts to execute automatically

Cyber News

New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing

Check Point VPN Zero-Day Exploited in Qilin Ransomware Attacks

Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day

Google patches new Chrome zero-day flaw exploited in the wild

LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE

Google Patches 5th Chrome Zero-Day Exploited in 2026

NFCShare Android malware spreads via fake banking app updates on GitHub

SoFi confirms third-party data breach at Hong Kong subsidiary

New Apple feature automatically changes your compromised passwords