An exposed WP-SHELLSTORM server revealed tools, logs, cloud credentials, and thousands of webshells used in a large website ...

JadePuffer, a ransomware operation, used an AI agent to carry out much of the intrusion chain from reconnaissance, key theft, ...

The original incomplete DeepSeek sample can be transformed into a fully functional attack with minimal effort,' Check Point researcher tells The Reg ...

Researchers from Zscaler found a new malware campaign dubbed Edgecution.

A malicious Microsoft Edge extension dubbed Edgecution has been used in a ransomware-linked attack to escape the browser sandbox and deploy a Python-based backdoor on compromised Windows systems. The ...

The FBI has issued a warning about a new phishing scheme called Kali365 that targets Microsoft 365 users. This scam uses AI-generated emails to trick users into authorizing access to their accounts ...

Credential theft fell to 13% of breach vectors in 2026. Attackers now bypass MFA via help desk resets and OAuth token theft. Five attack surfaces mapped.

Code hosting platform GitHub disclosed that it suffered a data breach last week as part of a software supply chain attack carried out by hackers. The attack was traced back to a GitHub developer, who ...

Fox Tempest is a financially motivated threat actor that operates a malware-signing-as-a-service (MSaaS) used by other cybercriminals to more effectively distribute malicious code, including ...

CISA is warning that a newly-disclosed Linux kernel bug dubbed "CopyFail" is already being exploited, just days after researchers dropped a working root-level exploit. Tracked as CVE-2026-31431, the ...

Detection, mitigation, and reverse-engineering tooling for CVE-2026-41940 (SessionScribe): the cPanel/WHM unauthenticated session-forgery vulnerability disclosed 2026-04-28. Defense-in-depth active ...