LaraHub

Investing

Attackers abuse OAuth’s built-in redirects to launch phishing and malware attacks

Researchers have found that attackers are abusing OAuth to send users from legitimate Microsoft or Google login pages to phishing sites or malware dow...

Mar 04, 2026 • 5 min read

Economy

Does the UK really want to ban VPNs? And can it be done?

Reports of a "Great British Firewall" are exaggerated. And even if they wanted to, here's why it would be virtually impossible.

Mar 04, 2026 • 5 min read

Banking

Supreme Court to decide whether geofence warrants are constitutional

Google has urged the justices to strike down the controversial warrants, which can sweep up location data from hundreds of phones near a crime scene.

Mar 05, 2026 • 5 min read

Crypto

Fake CleanMyMac site installs SHub Stealer and backdoors crypto wallets

We uncovered a fake CleanMyMac site delivering SHub Stealer, a macOS infostealer that steals credentials and silently backdoors crypto wallets.

Mar 06, 2026 • 5 min read

Banking

Beware of fake OpenClaw installers, even if Bing points you to GitHub

Bing search results pointed victims to GitHub repositories claiming to host OpenClaw installers, but in reality they installed malware.

Mar 06, 2026 • 5 min read

Banking

One click on this fake Google Meet update can give attackers control of your PC

We found a fake Google Meet update that enrolls the victim's Windows PC in an attacker's device management system.

Mar 06, 2026 • 5 min read

Banking

Ring doorbells: Won’t you see my neighbor? (Lock and Code S07E05)

This week on the Lock and Code podcast, we speak with Matthew Guariglia about Ring smart doorbells and the surveillance network they create.

Mar 08, 2026 • 5 min read

Banking

Quiz sites trick users into enabling unwanted browser notifications

The quiz is just bait. The real goal is to win permission to send browser notifications that can later be used for ads, scams, or shady promotions.

Mar 09, 2026 • 5 min read

Banking

Fake Claude Code install pages hit Windows and Mac users with infostealers

Researchers uncovered fake Claude Code install pages spreading infostealers that steal passwords and browser sessions.

Mar 09, 2026 • 5 min read

Investing

Hackers may have breached FBI wiretap network via supply chain

A suspected breach of the FBI’s wiretap network has investigators asking whether a nation-state was involved.

Mar 10, 2026 • 5 min read

Banking

Signal and WhatsApp accounts targeted in phishing campaign

Dutch intelligence warns that attackers are hijacking Signal and WhatsApp accounts by tricking users into sharing verification codes or linking a mali...

Mar 10, 2026 • 5 min read