Google-owned Mandiant published a complete forensic reconstruction today of a sophisticated intrusion campaign that used a single maliciously crafted CSV file to achieve root-level control over Cisco ...

A researcher found that using Anthropic’s Claude Opus 4.7, he could break into the website of Front Gate—used by every ...

A China-affiliated hacking cluster that specializes in building covert espionage highways — not collecting data itself, but running the infrastructure other Chinese state-aligned groups use to stay ...

Ignoring security alerts is a dangerous strategy. Here are the steps to reduce the risk.

An unknown threat actor exploited a recently disclosed high-severity security flaw impacting Cisco Catalyst SD-WAN as a zero-day at least two months before it was publicly disclosed, according to new ...

If your team runs LiteLLM as an AI gateway, you have an urgent patch to ship. Obsidian Security published a LiteLLM vulnerability chain on June 15, 2026 that allows any low-privilege user on the proxy ...

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

With the ability to take control of distributed devices at scale, HalluSquatting has the potential to achieve various ...

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

Google's Mandiant threat intelligence team reported this week that attackers began exploiting a critical flaw in Cisco Catalyst SD-WAN as early as March, roughly two months before Cisco disclosed the ...