CYBER ATTACK

Job seekers are being targeted by a new phishing campaign that uses phony Google Forms websites to steal login information. The campaign deceives victims.

Clickfix Attack with Nslookup Threat actors are now exploiting the trustworthy Windows utility nslookup.exe to spread malicious payloads through DNS.

On February 17, 2026, a critical advisory warning was released under advisory ICSA-26-048-04 about a serious vulnerability affecting Honeywell CCTV.

Microsoft Defender Centralized Script Library: To completely change the way security analysts handle the scripts and tools they use during live response.

A revolutionary update to Microsoft's Defender platform has been released, bringing centralized library management for live response operations. This.

An entire corporate network can be covertly exposed by a single employee action, according to a recent incident response investigation. After learning.

Discover how Researchers studying cybersecurity are alerting people to a massive cryptocurrency scam that is sweeping through Asia, especially Japan, and.

The Cline CLI npm package was briefly but alarmingly accessible to attackers through a compromised publish token, exposing developers who installed it.

A sophisticated cryptocurrency mining campaign has surfaced that can compromise even air-gapped environments by using external storage devices to target.

During a digital forensics and incident response (DFIR) engagement, LevelBlue researchers discovered a new SysUpdate malware variant that targets Linux.

The "ClickFix" social engineering technique has been improved by cybercriminals, who now use covert exploitation of nslookup.exe to deliver payloads.

Instead of exploiting software flaws, a recent macOS malware campaign is abusing developer practices This article explores homebrew command malicious.

An ongoing campaign of financial theft and cyber-espionage targeting developers in the Web3, cryptocurrency, and artificial intelligence sectors has been.

EVMbench, a new benchmark developed by OpenAI and Paradigm, is intended to assess AI agents' abilities to identify, address, and even take advantage of.

A well-planned, two-step phishing campaign is being used by a recently discovered cybercrime operation to target travelers and hotel employees. According.

Copilot and Grok for Malware Communication An innovative attack method that turns popular AI assistants—more especially, Microsoft Copilot and Grok from.

Researchers at Cato CTRL have discovered "Foxveil," a new malware loader that has been in use since August 2025 and conceals payloads on reputable.

ClawHub, the official skill marketplace for OpenClaw, an open-source AI agent formerly known as ClawdBot and Moltbot, has been compromised by a massive.

Currently, users throughout Asia are the target of a sophisticated cryptocurrency scam campaign that heavily and specifically targets Japan. Malvertising.

With active exploitation campaigns targeting corporate infrastructure across several nations, two serious zero-day vulnerabilities in Ivanti Endpoint.

Enterprise networks around the world are seriously threatened by a sophisticated cyberattack campaign that uses "ClickFix" social engineering This article.

Researchers studying cybersecurity have discovered a new version of the "ClickFix" social engineering campaign, which uses a more advanced method to avoid.

Beginning February 9, 2026, a widespread false-positive storm was caused by a flawed URL filtering rule update in Microsoft Exchange Online This article.

By avoiding configured Data Loss Prevention (DLP) policies and summarizing email messages protected by confidentiality sensitivity labels incorrectly, a.

Threat actors from North Korea have started a sophisticated attack campaign aimed at IT specialists working in the fields of artificial intelligence.

Through phony Homebrew installation pages that install the extensive credential-harvesting malware Cuckoo Stealer, a sophisticated social engineering.

Release of the OpenClaw AI Framework v2026.2.17 With major improvements, including support for Anthropic's Claude Sonnet 4.6 model, OpenClaw has released.

Discover how Targeting Linux systems with sophisticated command-and-control (C2) encryption capabilities, a new SysUpdate malware variant has surfaced as.

OpenClaw's official marketplace, ClawHub, was the target of a massive supply chain poisoning campaign called ClawHavoc, which disseminated 1,184 malicious.

PDF Zero-Day Vulnerabilities: Apryse WebViewer (formerly PDFTron) and Foxit PDF cloud services have 16 zero-day vulnerabilities that impact millions of.