SolanaCry abuses malicious GitHub repositories and AI coding agents to deploy NetSupport RAT, gain remote access, and steal ...

ESET tracks China, Iran, North Korea, Russia, and Belarus-aligned APT activity, supply-chain attacks, new malware, and AI-assisted techniques ...

A ClickFix campaign targets Windows and macOS users with fake Cloudflare verification pages, malicious domains, and deceptive command prompts ...

Unauthorized AI relays reroute Codex and Claude Code traffic, disable sandboxing, and expose prompts, files, credentials, and API secrets ...

Google has released Chrome 153 with a fix for another zero-day vulnerability already being exploited in real-world attacks. Tracked as CVE-2026-87491, the flaw is an out-of-bounds write vulnerability ...

Attack Narrative & Commands: The adversary seeks to automate the disruption of VMware vCenter to prepare for a mass ransomware deployment. They utilize a specialized PowerShell script designed to ...

Threat actor UTA0576 is exploiting a chain of vulnerabilities in Ivanti Connect Secure (ICS) appliances to achieve unauthenticated root access. The attack chain involves an authentication bypass ...

A Chinese APT group called Silver Fox conducts a tax‑themed phishing campaign against Indian entities. The initial email contains a PDF that directs victims to a malicious domain and triggers a ...

As the effects of CVE-2024-1086 continue to unfold, a new vulnerability has emerged, posing a menace to cyber defenders. Google has flagged a critical zero-click flaw in the Android System component ...

Attack Narrative & Commands: The adversary has gained initial access to the victim’s workstation. To maintain a stealthy presence and facilitate command-and-control (C2) communication, they need a ...

A critical Linux kernel vulnerability tracked as CVE-2026-99999, dubbed PwnEscape, can break the isolation boundary between virtual machines and their underlying hosts. The flaw resides in the Linux ...