CYBER ATTACK

Infiniti Stealer is a new piece of Mac malware that tricks people into clicking on fake Cloudflare human verification pages This article explores malware.

1inch, a decentralized exchange, found a threat that was always aimed at their support staff This article explores attacks infrastructure. . Attackers.

Cloud Software Group has sent out an important security bulletin that talks about two new security holes that have been found This article explores cloud.

The Internet Systems Consortium (ISC) has put out an important security advisory to let network administrators know about a serious security hole This.

A serious zero-click vulnerability in Anthropic's Claude Chrome Extension put more than 3 million users at risk of silent prompt-injection attacks This.

Anthropic accidentally made highly sensitive internal documents public, which showed that there is a powerful AI model that hasn't been released yet This.

Attackers are using GitHub Discussions to spread false warnings about security holes This article explores attackers using github. . The threat actors are.

The Internet Systems Consortium has put out a security warning about a serious flaw in its Kea DHCP server This article explores flaw kea dhcp. . If an.

Researchers at ReversingLabs have found a new operation This article explores attack ghost campaign. . The "Ghost campaign" is the name of this new wave.

The March 2026 security updates have been released to fix a number of holes in both enterprise and AI software systems. The most worrying problem in this.

Discover how The ClickFix social engineering method has come back with a lot of power. It tricks people into running harmful commands that quietly put.

On March 25, 2026, a hacker group called "Snow" from SnowTeam put up an ad on the Russian-speaking TierOne (T1) cybercrime forum This article explores.

Discover how VoidLink is a Linux malware framework that runs in the cloud and is written in Zig. It has a modular command-and-control structure with more.

Russian police have arrested the person they think is the administrator of LeakBase, a well-known international hacker forum This article explores.

The IDrive Cloud Backup Client for Windows has a serious local privilege escalation flaw that has been found. When the flaw is successfully used, an.

Red Menshen has put some of the most secret digital sleeper cells ever found into the infrastructure of global telecommunications This article explores.

GhostClaw is a new malware campaign that is actively going after macOS users through fake GitHub repositories and AI-assisted development workflows This.

Langflow is a well-known open-source, low-code interface that is made just for making workflows for multi-agent AI and large language models This article.

Since early 2025, a China-based hacker group called Silver Fox, also known as Void Arachne, has changed the way it attacks a lot This article explores.

Silver Fox, which is also known as Void Arachne and SwimSnake, is running a complicated AtlasCross RAT campaign that is specifically aimed at.

Torg Grabber is a new Malware-as-a-Service (MaaS) tool that steals credentials This article explores grabber new malware. . It started as a simple way to.

The threat group APT-Q-27 has been actively attacking Web3 customer support teams This article explores windows protection victim. . The attackers use.

A serious flaw in DiskStation Manager lets hackers from outside the network run any command they want This article explores telnet service vulnerability.

Discover how Microsoft has said that external multifactor authentication for Microsoft Entra ID is now available to everyone. This release gets rid of the.

Cisco has put out an urgent security alert about a serious flaw in its Secure Firewall Management Center (FMC) software This article explores cisco urgent.

Langflow is a well-known framework for making workflows for large language models (LLMs) This article explores langflow development environments. . CISA's.

OpenAI has started a public Safety Bug Bounty program to find AI abuse and safety issues in all of its products This article explores openai safetybug.

Kiss Loader is a new type of malware loader that uses advanced code injection methods to get into Windows systems without raising any alarms This article.

Botnet activity has gone up a lot in the past year. Security researchers have been keeping track of record-breaking distributed denial-of-service (DDoS).

Through the npm package registry, a new software supply chain campaign is going after developers This article explores packages attack. . Security.