malicious
-
Securing Autonomous Agents: OpenClaw Patches Critical Policy Bypass and Credential Leak Vulnerabilities
As the adoption of autonomous AI agent frameworks accelerates, the attack surface for these highly capable systems expands alongside them.…
Read More » -
Tenable Nessus Agent Vulnerability (CVE‑2026‑33694): Local Junction‑Point Privilege Escalation
In a significant security update, Tenable has disclosed a high-severity vulnerability within its Nessus Agent software for Windows environments. While…
Read More » -
Chaining Vulnerabilities to Achieve Root Access in CODESYS Soft PLCs
Recent research published by Nozomi Networks Labs has uncovered a sophisticated exploit chain targeting the CODESYS Control runtime. By leveraging…
Read More » -
Analyzing a New PowerShell-Based Telegram Session Stealer: From Pastebin to Bot API Exfiltration
Threat actors are currently refining a specialized class of infostealers specifically designed to hijack Telegram sessions. Unlike broad-spectrum malware that…
Read More » -
The Trojan Interview: How Void Dokkaebi Exploits Developer Trust to Fuel Supply Chain Attacks
In the high-stakes world of software engineering, a job offer is often the ultimate motivator. However, the threat actor known…
Read More » -
Critical Authentication Bypass Vulnerability (CVE-2025-65856) in Hangzhou Xiongmai XM530 IP Cameras
A high-severity security flaw has been uncovered in the Hangzhou Xiongmai Technology XM530 series IP cameras, posing an imminent threat…
Read More » -
The Invisible Shadow: How Signaling Vulnerabilities Enable Global Mobile Surveillance
A groundbreaking investigation by Citizen Lab has pulled back the curtain on a series of sophisticated, multi-year surveillance campaigns that…
Read More » -
Trigona Affiliates Pivot to Proprietary Data Exfiltration Tooling
In a significant tactical shift, ransomware operators are moving away from “living off the land” with common utilities and toward…
Read More » -
NCSC-UK Warns of China-Linked Covert Networks Using Hijacked IoT Devices
The UK’s National Cyber Security Centre (NCSC), along with international partners, has issued a joint warning about a growing trend…
Read More » -
Context.ai Compromise Exposes Vercel Customers
In a recent disclosure that highlights the growing complexity of modern software supply chains, Vercel has confirmed a sophisticated security…
Read More » -
Harvester APT Deploys Linux Variant of GoGra Backdoor via Microsoft Graph API, Outlook Mailboxes
In a significant pivot for cyber espionage tactics, security researchers have uncovered a Linux-compatible variant of the GoGra backdoor. This…
Read More » -
From Disclosure to Exploitation in Hours: LMDeploy SSRF Vulnerability Exploited in the Wild
In the rapidly evolving landscape of AI infrastructure, the window between vulnerability disclosure and active exploitation is shrinking to a…
Read More »