A malicious Tensorlake npm release carries a Shai-Hulud worm variant that steals developer secrets and spreads through ...

GreyNoise has identified a rise in scanning and remote code execution attempts targeting video surveillance devices in Ukraine between September 21 and October 1, 2026.

Hackers have used 16 malicious Firefox extensions to target cryptocurrency users with fake wallet screens that capture ...

Microsoft Teams is preparing to support synthetic audio and video detection to help organizations spot deepfake attacks. The ...

DarkSword operators use Coruna malware to steal iPhone crypto wallet recovery phrases, with exposed servers revealing theft ...

Security researchers have disclosed a critical Sungrow inverter vulnerability that could have allowed attackers to log in to the company’s iSolarCloud management platform without a valid password.

Hackers are targeting hotels with fake guest complaints and negative reviews that lead staff to malware disguised as ...

Public PoC released for CVE-2026-102489, a critical Zammad flaw enabling unauthenticated session cookie theft and potential code execution.

Hackers use public blockchains as C2 channels for supply chain malware, evading domain blocks and stealing cloud credentials.

A seller is allegedly offering a VirusTotal Enterprise API key for $350, with a pre-payment demonstration of the threat ...

Authorities have dismantled a scam center in Ghana as part of the FBI’s Operation Blackout, identifying 89 victims and ...

GitHub and Microsoft Applied Sciences launched ModernBERT to detect hidden passwords beyond known token patterns.