Cybersecurity researchers have uncovered a new phishing campaign by the North Korean state-sponsored threat group ScarCruft … North Korean APT37 Uses Fake Microsoft Security Alerts to Deploy NarwhalRAT MalwareRead more
Palo Alto Networks Confirms Active Exploitation of PAN-OS VPN Vulnerability CVE-2026-0257
Palo Alto Networks has confirmed that threat actors are actively exploiting a recently disclosed authentication bypass … Palo Alto Networks Confirms Active Exploitation of PAN-OS VPN Vulnerability CVE-2026-0257Read more
WordPress Supply Chain Attack Hits PushEngage, OptinMonster, and TrustPulse Users
A large-scale supply chain attack has compromised WordPress websites using the popular marketing plugins PushEngage, OptinMonster, … WordPress Supply Chain Attack Hits PushEngage, OptinMonster, and TrustPulse UsersRead more
152 Chrome Extensions Caught Tracking Users and Manipulating Search Traffic
Cybersecurity researchers have uncovered a large network of 152 Google Chrome extensions posing as live wallpaper … 152 Chrome Extensions Caught Tracking Users and Manipulating Search TrafficRead more
400+ Arch Linux AUR Packages Hijacked to Deploy Credential-Stealing Malware in Major Supply Chain Attack
A large-scale supply chain attack has compromised more than 400 packages in the Arch User Repository … 400+ Arch Linux AUR Packages Hijacked to Deploy Credential-Stealing Malware in Major Supply Chain AttackRead more
Critical Splunk Enterprise Vulnerability (CVE-2026-20253) Enables Unauthenticated Remote Code Execution
Splunk has released urgent security updates to address a critical vulnerability in Splunk Enterprise that could … Critical Splunk Enterprise Vulnerability (CVE-2026-20253) Enables Unauthenticated Remote Code ExecutionRead more
The Gentlemen Targets VMware, Cisco, and Fortinet Environments Worldwide
A new investigation by cybersecurity firm PRODAFT has shed light on the evolution of The Gentlemen, … The Gentlemen Targets VMware, Cisco, and Fortinet Environments WorldwideRead more
INTERPOL Shuts Down Sniper Dz Phishing Platform, Arrests 201 Suspects Across MENA
A major international law enforcement operation led by INTERPOL has successfully dismantled Sniper Dz, one of … INTERPOL Shuts Down Sniper Dz Phishing Platform, Arrests 201 Suspects Across MENARead more
New ‘Agentjacking’ Attack Tricks AI Coding Assistants Into Running Malicious Code
Cybersecurity researchers have identified a new attack technique called Agentjacking, a method that abuses AI-powered coding … New ‘Agentjacking’ Attack Tricks AI Coding Assistants Into Running Malicious CodeRead more
Unpatched Langflow Vulnerability Exploited in the Wild, Exposing 7,000+ AI Application Instances
Cybersecurity researchers have warned that a high-severity vulnerability in Langflow, a popular open-source platform used to … Unpatched Langflow Vulnerability Exploited in the Wild, Exposing 7,000+ AI Application InstancesRead more