Hackers exploit ClickFix to deploy malware loaders and Python tunnels on Windows, potentially enabling ransomware attacks.
Hackers used AI-generated code to target government Linux servers, steal credentials, access emails and databases and evade ...
On October 14, 2026, the SANS Internet Storm Center (ISC) research team published a technical report on the structural ...
ClickFix attacks fake CAPTCHA pages to trick users into running malicious commands, delivering malware through compromised websites.
CISA says attackers are exploiting an Ivanti Connect Secure authentication bypass to execute commands, steal credentials, and ...
The Russian state actor Star Blizzard has been using a new malware installation tactic dubbed "RedFlick" to deploy its signature CosmicPulse backdoor.
Zscaler ThreatLabz has uncovered a July 2026 campaign that hides malware in a trojanized Terraform provider. It targets ...
An AI coding agent can write a useful fix and still create a security incident along the way. It may install a compromised ...
Security Labs uncovered a fake Web3 accelerator that used malicious npm packages to target cryptocurrency founders and ...
GTIG and Mandiant uncovered a supply chain attack targeting AOMEI Technology's update infrastructure, where attackers used short-burst configuration tampering on origin servers to deploy tools like ...
Secure software supply chain solution provider Chainguard Inc. today unveiled a vulnerability-hunting service that uses ...