New malware abuses DoFun Android head unit updaters to deliver JarService, run ad fraud, and download the Zhima reverse proxy ...

Microsoft says CVE-2026-69836, a CVSS 10.0 Entra ID RCE flaw, has been exploited in the wild but is fully mitigated with no ...

GitLab CVE-2026-19478 is under active exploitation, with unauthenticated attacks able to modify or delete public projects ...

Adversa says encrypted prompt injection can make Grok send a user's name, location, tier, and chat prompts to an ...

BTR Reforged uses Defender's signed BTR.sys with an administrator account and SeLoadDriverPrivilege for kernel file and ...

U.S. agencies warn AI-generated exploit scripts target Siemens S7 PLCs, with exposed, outdated devices at risk across ...

Attackers exploit CVE-2026-73570 on Zimbra servers with zimbra-snmp installed and SNMP notifications enabled, allowing ...

Wazuh AI Analyst uses Amazon Bedrock and Claude to turn Wazuh Cloud security data into scheduled reports with posture and ...

Trojanized npm packages launch RedC2 4.0 on Linux at import time, giving operators shell access, credential theft, and ...

OpenAI pauses frontier RL training for two weeks, keeps its largest planned run on hold, and adds stricter monitoring and ...

ToxicPanda 2.0 adds 167 remote commands, targets 349 financial institutions, and uses Android accessibility to harvest PINs.

Manic Android malware targets 169 apps and can relay collected data through nearby infected devices when the source phone is ...