A new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability ...
Progress has released patches for multiple remote code execution and OS command injection flaws in MOVEit WAF and LoadMaster.
A Linux variant of the GoGra backdoor uses legitimate Microsoft infrastructure, relying on an Outlook inbox for stealthy ...
A previously unknown threat group using tried-and-tested social engineering tactics - Microsoft Teams chat invitations and ...
IntroductionOn March 12, 2026, Zscaler ThreatLabz discovered a malicious ZIP archive containing military-themed document lures targeting Chinese-speaking individuals. Our analysis of this sample ...
Nansen noted that in the ecosystem of blockchain analytics, traditional access models have long frustrated developers and ...
Every secure API draws a line between code and data. HTTP separates headers from bodies. SQL has prepared statements. Even email distinguishes the envelope from the message. The Model Context Protocol ...
The Cybersecurity and Infrastructure Security Agency has disclosed that a U.S. federal civilian agency was compromised by ...
Hackers have turned a critical React Server Components flaw into a structured exploitation operation, using Telegram bots, ...
A cybercrime group impersonates IT helpdesk staff on Microsoft Teams, deploying SNOW malware to steal credentials and ...
Soldiers are training for drone-on-drone combat using Bumblebee drones, which have been used in Ukraine and are being sent to ...