CYBER ATTACK

During a digital forensics and incident response (DFIR) engagement, LevelBlue researchers discovered a new SysUpdate malware variant that targets Linux.

The "ClickFix" social engineering technique has been improved by cybercriminals, who now use covert exploitation of nslookup.exe to deliver payloads.

Instead of exploiting software flaws, a recent macOS malware campaign is abusing developer practices This article explores homebrew command malicious.

An ongoing campaign of financial theft and cyber-espionage targeting developers in the Web3, cryptocurrency, and artificial intelligence sectors has been.

EVMbench, a new benchmark developed by OpenAI and Paradigm, is intended to assess AI agents' abilities to identify, address, and even take advantage of.

A well-planned, two-step phishing campaign is being used by a recently discovered cybercrime operation to target travelers and hotel employees. According.

Copilot and Grok for Malware Communication An innovative attack method that turns popular AI assistants—more especially, Microsoft Copilot and Grok from.

Researchers at Cato CTRL have discovered "Foxveil," a new malware loader that has been in use since August 2025 and conceals payloads on reputable.

ClawHub, the official skill marketplace for OpenClaw, an open-source AI agent formerly known as ClawdBot and Moltbot, has been compromised by a massive.

Currently, users throughout Asia are the target of a sophisticated cryptocurrency scam campaign that heavily and specifically targets Japan. Malvertising.

With active exploitation campaigns targeting corporate infrastructure across several nations, two serious zero-day vulnerabilities in Ivanti Endpoint.

Enterprise networks around the world are seriously threatened by a sophisticated cyberattack campaign that uses "ClickFix" social engineering This article.

Researchers studying cybersecurity have discovered a new version of the "ClickFix" social engineering campaign, which uses a more advanced method to avoid.

Beginning February 9, 2026, a widespread false-positive storm was caused by a flawed URL filtering rule update in Microsoft Exchange Online This article.

By avoiding configured Data Loss Prevention (DLP) policies and summarizing email messages protected by confidentiality sensitivity labels incorrectly, a.

Threat actors from North Korea have started a sophisticated attack campaign aimed at IT specialists working in the fields of artificial intelligence.

Through phony Homebrew installation pages that install the extensive credential-harvesting malware Cuckoo Stealer, a sophisticated social engineering.

Release of the OpenClaw AI Framework v2026.2.17 With major improvements, including support for Anthropic's Claude Sonnet 4.6 model, OpenClaw has released.

Discover how Targeting Linux systems with sophisticated command-and-control (C2) encryption capabilities, a new SysUpdate malware variant has surfaced as.

OpenClaw's official marketplace, ClawHub, was the target of a massive supply chain poisoning campaign called ClawHavoc, which disseminated 1,184 malicious.

PDF Zero-Day Vulnerabilities: Apryse WebViewer (formerly PDFTron) and Foxit PDF cloud services have 16 zero-day vulnerabilities that impact millions of.

0-Day RCE for Firefox A single-character typo in the SpiderMonkey JavaScript engine's WebAssembly garbage collection code led to a critical Remote Code.

Palo Alto Networks has announced a definitive agreement to acquire Koi Security, a leading innovator in Agentic Endpoint Security This article explores.

Discover how By purchasing Koi Security, a startup that specializes in shielding endpoints from the threats posed by sophisticated AI agents, Palo Alto.

CRESCENTHARVEST is a new malware campaign that targets Iranian protest supporters by taking advantage of the country's ongoing geopolitical unrest. This.

Windows Video ActiveX Control is Added by CISA RCE Error Following proof of active exploitation in the wild, CVE-2008-0015, a long-dormant Microsoft.

Discover how The most powerful mid-tier model to date, Claude Sonnet 4.6, has been formally released by Anthropic. It offers a thorough improvement in.

Release of Notepad++ v8.9.2 With the release of version v8.9.2, the popular open-source text and code editor has added a significant security feature.

The discovery of a new malware loader known as "Foxveil" that actively targets systems via reputable cloud platforms raises questions about how threat.

Researchers studying cybersecurity have discovered a new threat actor peddling a cunning tool known as "ClickFix." According to this payload-delivery.