Mar 24, 2026 // 10:57

The Tycoon2FA phishing service, which Europol and its partners took down on March 4, has rebounded to its previous activity levels. Microsoft spearheaded the takedown, […]

Mar 20, 2026 // 20:37

Operation Alice, an international effort by law enforcement, has taken down more than 373,000 dark web pages selling bogus child sexual abuse material (CSAM). The […]

Mar 12, 2026 // 17:14

The Polyfill.io supply chain attack, which impacted over 100,000 websites, has been recently linked to North Korean state-sponsored threat actors. While the attack was initially attributed to a […]

Mar 11, 2026 // 23:30

A critical SQL Injection (SQLi) vulnerability has been discovered in the Elementor Ally plugin, putting over 250,000 WordPress sites at risk of complete database takeover. The Vulnerability: CVE-2026-0814 The flaw exists […]

Feb 28, 2026 // 21:30

The ClawJacked flaw is a critical security vulnerability in the OpenClaw (formerly Moltbot/Clawdbot) AI agent that allows malicious websites to take full control of locally running agents. Discovered by […]

Feb 22, 2026 // 14:20

In February 2026, Elastic Security Labs uncovered a sophisticated ClickFix campaign that hijacks legitimate websites to deploy a previously undocumented remote access trojan (RAT) dubbed MIMICRAT (also known as […]