Rapid7 pulls 1,048 files from an exposed server, linking an LLM-assisted phishing pipeline to a live WebDAV campaign ...

SEBI has warned companies and regulated entities about a new scam called "Boss Scam." It is a cyber fraud where criminals ...

Attackers combined remote access, credential theft and data collection tools to quietly gather and remove sensitive ...

Introduction Installing a desktop messaging app on Windows requires more user judgment than installing a mobile app ...

Cursor IDE zero-day vulnerability: AI security firm Mindgard spent seven months trying to report a Windows code-execution ...

ACR Stealer campaigns use ClickFix lures, JPEG steganography, and WebDAV to steal browser tokens, passwords, PDFs, and synced ...

Attackers were found using a Lua-based malware loader posing as a TrueType font tile, with layered obfuscation and fileless ...

Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint ...

Researchers reported the flaw to Cursor in December, but it still remains in the popular AI coding platform and can be used ...

CrashStealer, a newly documented Mac infostealer, used an Apple-notarized meeting app to reach victims before stealing ...

An exposed WP-SHELLSTORM server revealed tools, logs, cloud credentials, and thousands of webshells used in a large website ...

Windows Defender zero-day CVE-2026-50656 — known as RoguePlanet — has been patched by Microsoft 29 days after researcher ...