Hackers exploit ClickFix to deploy malware loaders and Python tunnels on Windows, potentially enabling ransomware attacks.
Hackers used AI-generated code to target government Linux servers, steal credentials, access emails and databases and evade ...
In mid-October 2026, ProjectDiscovery, known for its vulnerability scanning tools and security verification frameworks, ...
On October 14, 2026, the SANS Internet Storm Center (ISC) research team published a technical report on the structural ...
Hackers used AI-assisted scripts to steal Linux passwords by tampering with shell files, maintain access and target sensitive data.
GTIG and Mandiant uncovered a supply chain attack targeting AOMEI Technology's update infrastructure, where attackers used short-burst configuration tampering on origin servers to deploy tools like ...
Researchers found an exposed server documenting a large-scale gift card fraud operation and two related schemes involving ...
Attackers used a compromised ConnectWise Cloud Backup credential for unauthorized sign-ins across 173 Microsoft 365 tenants.
MITRE ATT&CK v20 expands critical infrastructure installations threat coverage with new IT and OT attack techniques.
A previously unknown threat actor, tracked as UTA0576, exploited a chain of three zero-day vulnerabilities in Ivanti Connect ...
Microsoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tracked ...
A practical audit for which Bitcoin addresses expose your public key to a future quantum attack, then how to migrate in 12 ...