Bogus software download sites deploy malware that weakens Windows defenses and establishes persistence in China-based ...

Google launches Gemini 3.8 Flash Cyber for trusted defenders as OpenAI says Astra meets its Critical cybersecurity capability threshold.

Eight Git config flaws let received repositories run commands through seven AI coding agents; four remained unpatched at publication.

Gambling Goblin installs malicious Apache modules on Brazilian public-sector servers to reverse-proxy visitors to gambling ...

Attackers exploit a JFrog Artifactory authentication bypass to mint admin tokens and enumerate users on default ...

Attackers stole a METR API key and consumed credits worth about $600,000, while a later campaign failed to access internal ...

Breeze Comet targets Brazilian payment systems with custom malware, compromised accounts, and hundreds of fraudulent ...

DoJ corrected its QTFY statement, saying several U.S. agencies were targets rather than confirmed victims of the China-linked ...

Nimbus Manticore uses trojanized coding challenges to deploy NodeRabbit and PollCat RATs across Windows, Linux, and macOS.

ValleyRAT abuses signed QN Wallpaper software for DLL sideloading, disables Windows Defender, and runs inside a trusted ...

North Korean workers are expanding remote-job fraud beyond IT into healthcare and sales, using false identities, proxies, and ...

Aurora ransomware operators used Cursor Agent for hands-on exploitation against 10 targets after receiving credentials or an ...