CYBER ATTACK

On March 10, 2026, Zoom put out four security bulletins that revealed several weaknesses in its Windows-based client suite This article explores zoom.

Sanket Badhe, a researcher at Rutgers University, created ScamAgent, an autonomous, multi-turn AI framework that shows how large language models (LLMs).

On its March 2026 Patch Day, SAP released 15 new security notes that fixed a number of flaws in its products, including two critical-rated ones that could.

The release covers a wide range of core platforms, including SAP NetWeaver, S/4HANA, Business One, Business Warehouse, and a number of industry and client.

OpenAI Acquire Promptfoo OpenAI has announced its acquisition of Promptfoo, an artificial intelligence security platform designed to help enterprises find.

OpenAI has said that it wants to buy Promptfoo, an AI security testing platform that finds and fixes problems in large language model (LLM) applications.

On March 10, 2026, Microsoft released its Patch Tuesday security update for March 2026 This article explores vulnerability cve 2026. . It fixed 78.

Defective ZIP Files Get Past EDR and Antivirus Detections There is a serious problem with the way Endpoint Detection and Response (EDR) and antivirus.

A new vulnerability that enables attackers to conceal malicious files inside specially constructed ZIP archives and potentially get around antivirus and.

By enabling malicious image files to initiate code execution during standard metadata processing, a serious security vulnerability in ExifTool is.

AI-powered Penetration Testing with Kali Linux The Kali Linux team has released a new version of their expanding LLM-driven security series, which.

A high-severity vulnerability that could enable a local authenticated attacker to increase their privileges on impacted systems has been fixed by Ivanti's.

A sophisticated iPhone exploit toolkit called "Coruna" is at the center of an escalating controversy after new research revealed that it most likely came.

Russian Spies Used an iPhone Exploit Toolkit Russian spies and Chinese cybercriminals have gained access to a potent iPhone exploit kit called "Coruna,".

Hackers Target Microsoft Teams After persuading staff members to grant remote access, the attackers are now using a recently discovered malware family.

A rogue npm package that poses as a reliable developer tool has surfaced as part of a dangerous malware campaign that targets software developers This.

A high-severity stack-based buffer overflow vulnerability in Fortinet's FortiManager platform has been made public This article explores vulnerability.

Researchers have discovered a new malware campaign that propagates the stealer BoryptGrab by using phony GitHub repositories This article explores malware.

A phony CleanMyMac website is being used by a new macOS malware campaign to trick users into infecting their own computers This article explores.

Cloudflare has fixed several Pingora vulnerabilities that could allow attackers to smuggle HTTP requests through poison caches and edge proxies, creating.

Vulnerabilities in Cloudflare Pingora In order to address three serious vulnerabilities, Cloudflare has released version 0.8.0 of its open-source Pingora.

Following its addition to the Known Exploited Vulnerabilities (KEV) catalog by the Cybersecurity and Infrastructure Security Agency (CISA) on March 9.

Discover how One day after fresh hostilities broke out in the Middle East on March 1, 2026, Camaro Dragon, an advanced persistent threat group with ties.

Apache ZooKeeper Vulnerability: Two "Important" severity vulnerabilities have been found in Apache ZooKeeper, a popular service for naming and.

Since early February 2026, the Iranian advanced persistent threat group known as Seedworm—also known as MuddyWater, Temp Zagros, and Static Kitten—has.

Through a network of phony GitHub repositories, a new data-stealing malware known as BoryptGrab has been covertly propagating throughout Windows systems.

Large-scale fraudulent account registration campaigns that target service providers and online platforms globally have been connected to a vast cybercrime.

Discover how An ongoing wave of targeted phishing campaigns that have successfully taken over the accounts of prominent users, including government.

Copilot Cowork, a new AI-powered feature integrated into Microsoft 365 that goes beyond conversational support to autonomous task execution, was unveiled.

Organizations and individuals are now seriously threatened by a sophisticated credential-stealing campaign based on a tool known as VIP Keylogger This.