The trojanized Newtonsoft.Json fork campaign highlights how attackers are abusing developer trust, fake coding tests, and open-source familiarity to deliver malware.Newtonsoft.Json is a widely known .NET library used for JSON handling. Because developers recognize the name…
The Anubis ransomware claim against Coca-Cola’s fairlife subsidiary shows how ransomware incidents can quickly move from operational disruption to data-extortion pressur…
The latest Zimbra security update highlights how collaboration platforms can become high-risk targets when a vulnerability affects a component that administrators may no…
The active exploitation of CVE-2026-50522 highlights the continuing risk around Microsoft SharePoint Server deployments that remain exposed and unpatched.SharePoint is w…
The AWS Kiro flaw highlights a serious new class of risk in agentic development tools: untrusted web content can become executable influenc…
The growing exploitation of WP2Shell shows how quickly a critical WordPress core vulnerability can move from disclosure to mass scanning an…
The exploitation of the Palo Alto Networks GlobalProtect VPN flaw by the Qilin ransomware group highlights why remote-access systems must b…
The research on open-source Android AI agents highlights a new and uncomfortable security problem: AI agents can be manipulated by what the…
The EncForge ransomware campaign shows that AI and machine-learning infrastructure is now being targeted as a distinct and valuable attack …
The active exploitation of a critical ServiceNow code execution vulnerability highlights the growing risk around workflow platforms that si…
The FakeGit campaign shows how attackers are industrializing abuse of GitHub to distribute malware through fake open-source projects.Resear…
The reported Hugging Face breach highlights a new and uncomfortable reality: AI infrastructure is now part of the software supply chain, an…
The SonicWall SMA1000 zero-day exploitation shows how dangerous it becomes when attackers compromise remote-access appliances before organi…
The Estée Lauder breach linked to an Oracle E-Business Suite flaw highlights the serious risk created when enterprise business applications…
The Hugging Face breach is an important warning that AI infrastructure has become part of the modern software supply chain, and attackers a…