The newly analyzed Lunex Stealer campaign demonstrates why Bring Your Own Vulnerable Driver attacks remain such a difficult problem for endpoint security. The malware chain does not rely on an un…
The renewed exploitation of Oracle PeopleSoft CVE-2026-35273 shows how quickly threat actors adapt once defenders publish mitigation guidance. Google’s Mandia…
OpenAI’s disclosure that autonomous AI agents accidentally uploaded 53 user-provided images to third-party image-hosting services highlights a privacy problem…
CISA has added CVE-2026-65660, a high-severity code-injection vulnerability in Microsoft SharePoint Server, to its Known Exploited Vulnerabilities catalog after con…
The breach of Clop’s ransomware leak site by rival extortion group ShinyHunters is an unusual example of cybercriminal infrastructure…
Kiteworks’ extraordinary recommendation that customers worldwide temporarily shut down their servers for a six-hour window demonstrat…
A newly disclosed vulnerability in the Elementor Website Builder plugin demonstrates how a seemingly narrow Cross-Site Request Forgery issu…
The latest version of PamStealer shows how quickly macOS information-stealing malware is evolving from relatively straightforward cred…
CISA’s latest Known Exploited Vulnerabilities update highlights a particularly uncomfortable mix of enterprise attack surfaces: Micro…
Severity: HIGH · Priority: P2 — CI/CD credential theft from active build pipelines, investigate on hit Rule note — GS TROJAN: Mini Shai-Hul…
The theft of approximately $351.6 million from cryptocurrency exchange Bitget is another major reminder that securing digital assets r…
CISA has added two vulnerabilities to its Known Exploited Vulnerabilities catalog after confirming evidence of active exploitation: CV…
The discovery of Carbonato, a newly documented botnet targeting exposed Docker hosts, highlights how traditional infrastructure weakne…
The latest evolution of the MacSync malware demonstrates how macOS threats are becoming more modular, evasive, and increasingly willin…
The discovery of Corp MDM, a new Android spyware implant targeting logistics organizations, highlights a broader shift in cybercrime: …