Security researchers have disclosed a serious vulnerability in Google’s Vertex AI SDK for Python that could … Google Vertex AI SDK Flaw Allowed Attackers to Hijack AI Model UploadsRead more
ClickFix Malware Campaigns Deliver BabaDeda, Lorem Ipsum, and Potemkin Loaders
Cybersecurity researchers have uncovered several active ClickFix campaigns distributing three sophisticated malware loaders: BabaDeda Loader, Lorem … ClickFix Malware Campaigns Deliver BabaDeda, Lorem Ipsum, and Potemkin LoadersRead more
SprySOCKS Expands Beyond Linux With New Windows Malware Variants
Cybersecurity researchers have uncovered two previously undocumented Windows versions of the SprySOCKS backdoor, a malware family … SprySOCKS Expands Beyond Linux With New Windows Malware VariantsRead more
New Rokarolla Android Banking Trojan Targets 217 Banking and Crypto Apps
Security researchers at Zimperium’s zLabs have uncovered a powerful new Android banking trojan called Rokarolla, capable … New Rokarolla Android Banking Trojan Targets 217 Banking and Crypto AppsRead more
North Korean APT37 Uses Fake Microsoft Security Alerts to Deploy NarwhalRAT Malware
Cybersecurity researchers have uncovered a new phishing campaign by the North Korean state-sponsored threat group ScarCruft … North Korean APT37 Uses Fake Microsoft Security Alerts to Deploy NarwhalRAT MalwareRead more
Palo Alto Networks Confirms Active Exploitation of PAN-OS VPN Vulnerability CVE-2026-0257
Palo Alto Networks has confirmed that threat actors are actively exploiting a recently disclosed authentication bypass … Palo Alto Networks Confirms Active Exploitation of PAN-OS VPN Vulnerability CVE-2026-0257Read more
WordPress Supply Chain Attack Hits PushEngage, OptinMonster, and TrustPulse Users
A large-scale supply chain attack has compromised WordPress websites using the popular marketing plugins PushEngage, OptinMonster, … WordPress Supply Chain Attack Hits PushEngage, OptinMonster, and TrustPulse UsersRead more
152 Chrome Extensions Caught Tracking Users and Manipulating Search Traffic
Cybersecurity researchers have uncovered a large network of 152 Google Chrome extensions posing as live wallpaper … 152 Chrome Extensions Caught Tracking Users and Manipulating Search TrafficRead more
400+ Arch Linux AUR Packages Hijacked to Deploy Credential-Stealing Malware in Major Supply Chain Attack
A large-scale supply chain attack has compromised more than 400 packages in the Arch User Repository … 400+ Arch Linux AUR Packages Hijacked to Deploy Credential-Stealing Malware in Major Supply Chain AttackRead more
Critical Splunk Enterprise Vulnerability (CVE-2026-20253) Enables Unauthenticated Remote Code Execution
Splunk has released urgent security updates to address a critical vulnerability in Splunk Enterprise that could … Critical Splunk Enterprise Vulnerability (CVE-2026-20253) Enables Unauthenticated Remote Code ExecutionRead more