Shark AWS IoT policy flaw could let one certificate send root commands to other vacuums in the same region, exposing cameras, ...

UAT-7810, the Chinese APT behind a prolonged espionage infrastructure campaign, has added new backdoors to its arsenal.

Five malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in a supply-chain attack that ...

Elevate your scripting game with these must-know Bash variables.

Chinese hackers develop LONGLEASH malware to expand ORB network, researchers have exposed the UAT-7810 campaign.

Microsoft Patch Tuesday July 2026 delivers 622 CVEs, the largest release in company history, with two exploited zero-days in ...

The attack vector is available for rent at scale, and evades AV and EDR, leaving YARA analysis as the best detection option.

Chinese hackers tracked as 'UAT-7810' are actively evolving their malware to expand their Operational Relay Box (ORB) network ...

Securonix says PureLogs infection starts with a fake PDF JavaScript file and uses PowerShell, fileless .NET loading, and LOLBins.

A newly-disclosed exploit in Claude Code’s ‘auto-mode’ leaves developers facing remote code execution (RCE) vulnerabilities ...