Apple introduces end-to-end encrypted RCS messaging, enhanced memory protections, and default Stolen Device Protection in iOS ...

Outlook add-in phishing, Chrome and Apple zero-days, BeyondTrust RCE, cloud botnets, AI-driven threats, ransomware activity, ...

ZeroDayRAT is a cross-platform mobile spyware sold on Telegram that enables live surveillance, OTP theft, and financial data ...

Infostealer malware stole OpenClaw AI agent files including tokens and keys, while exposed instances and malicious skills ...

Academic study finds 25 attack methods in major cloud password managers exposing vault, recovery, and encryption design risks.

Google fixes actively exploited Chrome zero-day CVE-2026-2441, a high-severity CSS use-after-free flaw enabling sandboxed ...

Cyber attacks average 1,968 weekly as ClickFix, ransomware shifts, and exposure gaps accelerate exploitation beyond defense ...

Microsoft details a new ClickFix variant abusing DNS nslookup commands to stage malware, enabling stealthy payload delivery ...

Google finds nation-state hackers abusing Gemini AI for target profiling, phishing kits, malware staging, and model ...

Microsoft patches 59 vulnerabilities, including six actively exploited zero-days, with CISA mandating urgent federal ...

Active exploitation of BeyondTrust enables unauthenticated RCE as CISA adds Apple, Microsoft, SolarWinds, and Notepad++ flaws ...

First, people need to remember that the original attack on tools like ChalkJS was a successful MFA phishing attempt on npm’s ...