SolanaCry abuses malicious GitHub repositories and AI coding agents to deploy NetSupport RAT, gain remote access, and steal ...

ESET tracks China, Iran, North Korea, Russia, and Belarus-aligned APT activity, supply-chain attacks, new malware, and AI-assisted techniques ...

A ClickFix campaign targets Windows and macOS users with fake Cloudflare verification pages, malicious domains, and deceptive command prompts ...

Unauthorized AI relays reroute Codex and Claude Code traffic, disable sandboxing, and expose prompts, files, credentials, and API secrets ...

Google has released Chrome 153 with a fix for another zero-day vulnerability already being exploited in real-world attacks. Tracked as CVE-2026-87491, the flaw is an out-of-bounds write vulnerability ...

Attack Narrative & Commands: The adversary seeks to automate the disruption of VMware vCenter to prepare for a mass ransomware deployment. They utilize a specialized PowerShell script designed to ...

Threat actor UTA0576 is exploiting a chain of vulnerabilities in Ivanti Connect Secure (ICS) appliances to achieve unauthenticated root access. The attack chain involves an authentication bypass ...

As the effects of CVE-2024-1086 continue to unfold, a new vulnerability has emerged, posing a menace to cyber defenders. Google has flagged a critical zero-click flaw in the Android System component ...

Attack Narrative & Commands: The adversary has gained initial access to the victim’s workstation. To maintain a stealthy presence and facilitate command-and-control (C2) communication, they need a ...

A Chinese APT group called Silver Fox conducts a tax‑themed phishing campaign against Indian entities. The initial email contains a PDF that directs victims to a malicious domain and triggers a ...

Cisco has released security updates for CVE-2026-76418, a high-severity zero-day vulnerability affecting the Remote Access SSL VPN service in Cisco Secure Firewall Adaptive Security Appliance (ASA) ...