The discovery of malicious Terraform providers distributed through the HashiCorp Registry highlights an important expansion in software supply-chain attacks. Security researchers at Aikido identified …
The rapid exploitation of CVE-2026-87902 demonstrates how little time organizations may now have between disclosure of a critical vulnerability and real-world attac…
The discovery of RemControl, a new Android banking malware-as-a-service platform, highlights how mobile banking malware is evolving from relatively simple credentia…
The discovery that third-party.com, a domain widely used for years as a generic placeholder in developer documentation and code examples, is now serving a ClickFix …
Cisco Talos has documented a Windows malware prototype called CLOSEDQUORUM that introduces an unusual approach to command-and-control:…
The disclosure around GitLab’s incoming email feature highlights an unusual but important security lesson: sometimes something that l…
The disclosure of the full technical details behind MikroTrick reveals a particularly dangerous attack chain affecting MikroTik Router…
The discovery of a financially motivated cybercrime campaign using autonomous AI agents to attack online retailers represents an important …
The compromise of legitimate MemTensor packages across both npm and the Python Package Index (PyPI) highlights a particularly dangerous for…
The latest disclosure involving UTA0565, a China-linked threat actor tracked by Volexity, highlights how quickly sophisticated exploit…
The disclosure of CVE-2026-94127, an actively exploited critical vulnerability in F5 BIG-IP Access Policy Manager (APM), highlights a …
CISA's addition of four vulnerabilities to its Known Exploited Vulnerabilities Catalog on September 22, 2026 deserves particular attention …
The discovery of the malicious npm package tw-pkgprobe-7731 highlights a growing software supply-chain risk: attackers are not always …
Sweden’s decision to fine Miljödata SEK 1.8 million following a major 2025 cyberattack highlights an important point about data-…
The newly documented Macfinger ClickFix campaign is a useful reminder that macOS users are increasingly being targeted through attack …