#and


WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

Sep 25, 2026 // 13:28

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known […]

Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls

Sep 24, 2026 // 23:38

The logistics sector has become the target of a new malicious cyber campaign that distributes an Android spyware codenamed Corp MDM. According to Have I […]

New RemControl Android banking malware targets users in Europe and Canada

Sep 24, 2026 // 23:38

A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap IPTV application. Although the infrastructure has been […]

ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories

Sep 24, 2026 // 23:38

This week, the dangerous stuff keeps arriving dressed as something boring. An update. A login box. A search answer. A coding tool. A link you […]

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Sep 23, 2026 // 16:57

Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based […]

Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests

Sep 23, 2026 // 14:47

Anthropic and OpenAI on Tuesday announced new models, with both artificial intelligence (AI) companies noting that they are continuing to invest in improving alignment to […]

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

Sep 23, 2026 // 09:48

The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached the U.S. Federal Bureau of Investigation and stolen data belonging to current […]

Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access

Sep 22, 2026 // 13:14

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched security flaw impacting Zyxel GS1900 series switches to its Known Exploited Vulnerabilities […]

Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR

Sep 22, 2026 // 00:12

A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a password stealer […]

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

Sep 21, 2026 // 17:32

A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble keeps showing up inside things […]

Previous 1 2 3 4 5 6 … 55 Next