Mar 3, 2026 // 17:23

The newly revealed AirSnitch attack highlights a critical flaw in Wi-Fi client isolation, a feature long trusted to prevent devices on the same network from communicating with or […]

Mar 3, 2026 // 17:06

Starkiller is a sophisticated phishing-as-a-service (PhaaS) platform developed by a threat group called Jinkusu. It utilizes an Adversary-in-the-Middle (AitM) reverse proxy architecture to bypass multi-factor authentication […]

Mar 3, 2026 // 14:26

A critical vulnerability, tracked as CVE-2026-2256, has been identified in the ModelScope MS-Agent framework (an open-source AI agent framework), which can lead to a full system compromise. 

Mar 3, 2026 // 14:24

Cloud Imperium Games (CIG), the developer of Star Citizen, has disclosed a security breach that compromised the personal information of an undisclosed number of users. 

Mar 3, 2026 // 13:35

Microsoft has warned of phishing campaigns specifically targeting government and public-sector organizations by abusing OAuth redirection mechanisms to deliver malware. Key Details of the Campaign Mitigation and […]

Mar 3, 2026 // 13:30

The University of Hawaiʻi (UH) Cancer Center confirmed a ransomware attack affecting 1.24 million people. The breach targeted historical research datasets within the Epidemiology Division. What […]

Mar 3, 2026 // 12:19

Google has confirmed that a high-severity security flaw, CVE-2026-21385 (CVSS score 7.8), in an open-source Qualcomm graphics component is being exploited in the wild.  The vulnerability was disclosed as […]

Mar 3, 2026 // 12:16

The threat actor SloppyLemming (also known as Outrider Tiger or Fishing Elephant) has launched a sophisticated cyber-espionage campaign targeting government and critical infrastructure entities in Pakistan and Bangladesh. According to […]

Mar 3, 2026 // 07:45

CyberStrikeAI is a sophisticated open-source, AI-native security testing platform. While it was built for professional penetration testing, it has been rapidly adopted by threat actors to […]

Mar 2, 2026 // 23:47

A sophisticated phishing campaign is currently using fake Google Account security pages to trick users into installing malicious Progressive Web Apps (PWAs). These apps are designed to steal […]