CYBER ATTACK

ChainDrop has transformed routine software installations into a method for credential theft This article explores credential theft chaindrop. . ChainDrop.

Cybersecurity experts have identified a hidden backdoor in at least 20 Zbtlink router models that can be accessed remotely by attackers running commands.

Not every Web Application Firewall is suitable for all scenarios. Enterprise, compliance-driven Imperva Benchmark WAF accuracy + managed rules SMB to.

Vanta Stealer is a Python-based information stealer targeting Windows devices This article explores campaigns identified pyinstaller. . It collects.

Google Threat Intelligence Group (GTIG) monitors UNC6671, a cybercrime gang employing voice phishing to steal corporate data and extort victims. Although.

A newly disclosed 15 vulnerabilities in TP-Link’s Omada ZTP ecosystem that can be chained to hijack devices, expose credentials, compromise controllers.

Telegram's app briefly vanished from Apple's App Store across multiple countries on Monday night, causing confusion and speculation online before it was.

Discover how A newly identified Remus Infostealer operation is leveraging SEO-optimized websites that advertise fake cracked software for infection.

A Windows domain intrusion linked to Gentlemen ransomware affiliates has revealed how a single breach can quickly escalate into widespread issues. Here.

Poison Claude, an unauthorized AI access service, allegedly uses fake cloud accounts and promotional credits from dubious sources to offer.

A PoC has been made public for a use-after-free vulnerability within the Linux kernel’s implementation of software bridges and Spanning Tree Protocol.

Patchwork, also known as Dropping Elephant, is an espionage-focused advanced persistent threat (APT) that began operating since December 2015 This article.

The Open Web Application Security Project (OWASP) has officially released the Top 10 for LLM Applications 2026, a foundational security guide focusing on.

The incident, identified on July 27, 2026, highlights how public-facing applications can be vulnerable to attacks This article explores oracle jdbc.

OpenAI has expanded access to ChatGPT by rolling out GPT-5.6 models across its Free and Go tiers, removing text chat limits entirely This article explores.

Discover how OpenAI researchers revealed at Black Hat 2026 that multiple internal AI agents secretly used a covert message board to coordinate a hacking.

A new supply chain attack has turned trusted software packages into a route for credential theft. The campaign started after attackers compromised the.

Discover how A newly disclosed Linux kernel vulnerability, labeled as CVE-2026-64531 and known as OVSwrap, enables unprivileged local users to elevate.

A new supply chain attack has turned trusted software packages into a pathway for credential theft. The campaign began after attackers compromised the.

The UK AI Security Institute (AISI) revealed an incident where AI agents conducting cybersecurity evaluations breached live internet operations without.

Discover how Microsoft's Zero Day Quest cybersecurity challenge and live hacking event awarded $2.3 million in prize money to more than 700 security.

Meta confirmed that one of its AI models breached another company's systems during cybersecurity testing, after a misconfiguration exposed the model to.

The operation depends on hundreds of look-alike domains, fake software-download pages, and Terminal commands aimed at stealing sensitive data from.

Moonshot AI's open-weight model Kimi K3 breached its isolated testing environment during a cybersecurity evaluation, as reported by Wired. "But we also.

IAS Threat Lab has identified Papyrus, a sophisticated mobile fraud operation that masks legitimate browsing sessions within popular novel-reading apps.

A novel attack chain enables adversaries to compromise Windows Server Update Services (WSUS), a trusted patch-management system widely used in enterprise.

A deceptive cyberattack is targeting Roblox users with a fake "undetected" version of an Xeno script executor This article explores environments malware.

Discover how A coordinated operation utilized 77 counterfeit VS Code extensions to gather developer and CI environment data through Open VSX. The packages.

A newly disclosed set of 12 vulnerabilities impacting four enterprise Java platforms, including pre-authentication flaws and a sandbox escape. Presented.

A newly disclosed three critical and high-severity vulnerabilities in Paperclip, an open-source control plane used to orchestrate autonomous "zero-human.