PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords

Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices

Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials

ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

Identity Lifecycle Management Wasn't Built for AI Agents 

AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack

FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation

Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters

19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges

SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT

VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer

Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures

Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic

Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands

Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts

AI-Generated Browser Ransomware Abuses Chromium API on Windows, Linux, macOS, Android

2026 Cybersecurity Assessment: The Gap Between Awareness and Resilience

Microsoft Accelerates Post-Quantum Cryptography Shift to 2029

Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware

Anthropic Restores Claude Fable 5 After U.S. Lifts Jailbreak-Linked Export Controls

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts

Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery

Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service

Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS

Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses