CYBER ATTACK

Currently, users throughout Asia are the target of a sophisticated cryptocurrency scam campaign that heavily and specifically targets Japan. Malvertising.

With active exploitation campaigns targeting corporate infrastructure across several nations, two serious zero-day vulnerabilities in Ivanti Endpoint.

Enterprise networks around the world are seriously threatened by a sophisticated cyberattack campaign that uses "ClickFix" social engineering This article.

Researchers studying cybersecurity have discovered a new version of the "ClickFix" social engineering campaign, which uses a more advanced method to avoid.

Beginning February 9, 2026, a widespread false-positive storm was caused by a flawed URL filtering rule update in Microsoft Exchange Online This article.

By avoiding configured Data Loss Prevention (DLP) policies and summarizing email messages protected by confidentiality sensitivity labels incorrectly, a.

Threat actors from North Korea have started a sophisticated attack campaign aimed at IT specialists working in the fields of artificial intelligence.

Through phony Homebrew installation pages that install the extensive credential-harvesting malware Cuckoo Stealer, a sophisticated social engineering.

Release of the OpenClaw AI Framework v2026.2.17 With major improvements, including support for Anthropic's Claude Sonnet 4.6 model, OpenClaw has released.

Discover how Targeting Linux systems with sophisticated command-and-control (C2) encryption capabilities, a new SysUpdate malware variant has surfaced as.

OpenClaw's official marketplace, ClawHub, was the target of a massive supply chain poisoning campaign called ClawHavoc, which disseminated 1,184 malicious.

PDF Zero-Day Vulnerabilities: Apryse WebViewer (formerly PDFTron) and Foxit PDF cloud services have 16 zero-day vulnerabilities that impact millions of.

0-Day RCE for Firefox A single-character typo in the SpiderMonkey JavaScript engine's WebAssembly garbage collection code led to a critical Remote Code.

Palo Alto Networks has announced a definitive agreement to acquire Koi Security, a leading innovator in Agentic Endpoint Security This article explores.

Discover how By purchasing Koi Security, a startup that specializes in shielding endpoints from the threats posed by sophisticated AI agents, Palo Alto.

CRESCENTHARVEST is a new malware campaign that targets Iranian protest supporters by taking advantage of the country's ongoing geopolitical unrest. This.

Windows Video ActiveX Control is Added by CISA RCE Error Following proof of active exploitation in the wild, CVE-2008-0015, a long-dormant Microsoft.

Discover how The most powerful mid-tier model to date, Claude Sonnet 4.6, has been formally released by Anthropic. It offers a thorough improvement in.

Release of Notepad++ v8.9.2 With the release of version v8.9.2, the popular open-source text and code editor has added a significant security feature.

The discovery of a new malware loader known as "Foxveil" that actively targets systems via reputable cloud platforms raises questions about how threat.

Researchers studying cybersecurity have discovered a new threat actor peddling a cunning tool known as "ClickFix." According to this payload-delivery.

Downloads for Microsoft VS Code Extension 11M A serious flaw in Microsoft's widely used Visual Studio Code (VS Code) Live Preview extension, which has.

Cybercriminals have launched extensive spam campaigns aimed at government agencies and investors by taking advantage of Atlassian Jira Cloud. From late.

Cybersecurity researchers discovered a complex attack chain in which the attackers delivered Matanbuchus 3.0 malware via ClickFix social engineering.

Google Chromium 0-Day Vulnerability An urgent alert about a recently found Google Chromium zero-day vulnerability that is allegedly being actively.

A critical remote code execution (RCE) vulnerability in Microsoft Windows Video ActiveX Control has been added to the U.S This article explores exploits.

A highly skilled new malware campaign called "CRESCENTHARVEST" has emerged, deliberately taking advantage of Iran's geopolitical instability to target.

After a nearly year-long break, the premium malware-as-a-service loader Matanbuchus reappeared in February 2026 This article explores premium malware.

A malicious fork of the well-known macOS app Triton was recently discovered on GitHub, which has caused concern in the cybersecurity community. The app's.

Because they make it simple for people to access websites, make payments, and download apps, QR codes have become commonplace in daily life This article.