malicious

March 23, 2026

SEO Poisoning Campaign Uses Fake Popular Apps to Deliver AsyncRAT

An ongoing SEO poisoning campaign abuses search results to trick users into downloading trojanized installers for more than 25 popular…
Read More »
March 23, 2026

CISA Issues Warning on Apple Vulnerabilities Exploited Through DarkSword iOS Chain

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent advisory regarding three critical security flaws affecting the Apple…
Read More »
March 21, 2026

Safer Sideloading Arrives with Android’s Advanced Flow

Google has announced a new mechanism in Android called Advanced Flow, which enables power users to sideload APKs from unverified…
Read More »
March 21, 2026

Trivy Vulnerability Scanner Compromised to Inject Malicious Scripts That Steal Credentials

Ahighly sophisticated supply chain attack has successfully compromised the official Trivy GitHub Actions repository, severely impacting continuous integration environments. Discovered…
Read More »
March 20, 2026

Copyright Complaint Lures Linked to New PureLog Stealer Credential Theft Wave

Criminals are actively deploying the PureLog Stealer malware through a sophisticated, multi-stage assault campaign that disguises itself as legitimate copyright…
Read More »
March 20, 2026

Phishing Campaign Targeting Signal and WhatsApp Users Linked to Russian Intelligence

Russian intelligence-linked threat actors are actively targeting users of encrypted messaging apps such as Signal and WhatsApp through phishing campaigns…
Read More »
March 20, 2026

Bamboo Data Center and Server Vulnerability Enables Remote Code Execution

Atlassian has officially patched a critical Remote Code Execution (RCE) vulnerability within its Bamboo Data Centre platform. Formally tracked as…
Read More »
March 20, 2026

CISA Warns Cisco Secure Firewall Management Center 0-Day Is Being Exploited in Ransomware Attacks

The Cybersecurity and Infrastructure SecurityAgency (CISA) has issued an urgent warning concerning a critical zero-day vulnerability actively exploited in targeted…
Read More »
March 20, 2026

Critical UNISOC T612 Modem Flaw Enables Remote Code Execution via Cellular Calls

A critical flaw has beenidentified in UNISOC modem firmware, enabling attackers to execute arbitrary code remotely via cellular networks. As…
Read More »
March 20, 2026

Chrome Security Update Fixes 26 Vulnerabilities Enabling Remote Malicious Code Execution

Google has released a critical security update for its Chrome desktop web browser, addressing 26 distinct vulnerabilities that could enable…
Read More »
March 20, 2026

New Critical Jenkins Vulnerabilities Put CI/CD Servers at Risk of RCE Exploits

Jenkins disclosed a critical security advisory addressing multiple vulnerabilities impacting its core automation server and the LoadNinja plugin. These flaws…
Read More »
March 20, 2026

Fake Tools and CDNs Power New “Vibe-Coded” Malware Campaign

“Vibe coding” has evolved from a buzzword to a key battleground, and a new malware campaign shows how attackers are…
Read More »
March 19, 2026

Claude Vulnerabilities Allow Data Exfiltration and Malicious Redirect Attacks

Security researchers have uncovered a critical attack chain within Anthropic’s Claude.ai platform, dubbed “Claudy Day.” This vulnerability sequence enables attackers…
Read More »
March 19, 2026

CISA Calls on Organizations to Strengthen Microsoft Intune Security After Stryker Incident

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert calling on organizations to aggressively harden their endpoint…
Read More »
March 19, 2026

Pyronut Package Backdoors Telegram Bots With RCE

Malicious ‘Pyronut’ is a trojanized Python package that backdoors Telegram bots and userbots, giving attackers remote code execution over both…
Read More »
March 19, 2026

LeakNet boosts ransomware with ClickFix lures, stealthy Deno loader

Ransomware group LeakNet is scaling its operation by integrating mass-market social engineering lures via ClickFix techniques with a stealthy Deno-based…
Read More »
March 18, 2026

Apple WebKit Security Flaw Exposes iOS and macOS Users to Content-Based Bypass Attacks

Apple released emergency security patches to address a critical WebKit flaw currently exposing iPhone, iPad, and Mac users to sophisticated…
Read More »
March 18, 2026

ForceMemo Hijacks GitHub Accounts, Backdoors Python Repos

ForceMemo represents an active campaign targeting GitHub accounts and Python repositories, leveraging force-pushed commits to silently implant malware. Utilizing GlassWorm’s…
Read More »
March 18, 2026

New Kubernetes NFS CSI Vulnerability Enables Unauthorized Directory Deletion and Changes

A newly disclosed security flaw in the Kubernetes Container Storage Interface (CSI) Driver for Network File System (NFS) exposes storage…
Read More »
March 17, 2026

CISA Alerts Users to Exploited Chrome 0-Day Flaws

The Cybersecurity and Infrastructure Security Agency (CISA) has released an urgent security advisory concerning two highly critical zero-day vulnerabilities currently…
Read More »

Previous page Next page