Vulnerabilities

The democratization of sophisticated cyberattacks reached a new milestone when an open-source tool from GitHub was used to compromise multiple commercial and savings banks. This recent surge in AI-driven intrusions signifies a pivotal shift in digital warfare, where the traditional barriers

As the PoeLLM malware expands its reach, it is increasingly focusing on lateral movement through aggressive brute-force attacks on organizational SSH configurations. This shift represents a significant escalation in the Canto Incognito campaign, which has been identified as a highly targeted

The malicious code embedded in these extensions transmitted stolen 64-character private keys directly to a Cloudflare Workers endpoint via URL query parameters. This discovery led to the immediate unpublishing of sixteen distinct browser extensions from the Mozilla Firefox ecosystem by early

The UAC-0277 campaign serves as a critical reminder that the human element remains a primary target for attackers seeking to bypass sophisticated technical defenses. This extensive operation, which has already compromised over 100 legitimate web platforms, represents a significant evolution in how

A persistent threat actor has been reusing dormant infections from 2025 by simply updating the exfiltration endpoints to a new bare IP address. This specific operation, identified as the GhostAction campaign, highlights the extreme vulnerability inherent in modern CI/CD pipelines where automation

While the secure connection setting can be disabled in the browser menu, security experts warn that doing so leaves mobile users vulnerable in public spaces. This reality underscores the importance of the Chrome 154 update, launched on October 1, 2026, which represents a pivotal moment in the