NomShub, a vulnerability chain in Cursor AI, allowed attackers to achieve persistent access to systems via indirect prompt ...

PHANTOMPULSE spreads via Obsidian plugin abuse in REF6598 campaign, targeting finance and crypto users, bypassing AV controls ...

Microsoft is warning of threat actors increasingly abusing external Microsoft Teams collaboration and relying on legitimate ...

A single unauthenticated connection gives attackers a full shell; credential theft observed in under three minutes on honeypot servers.

Shell rapidly increased LNG supplies to India in response to disruptions in West Asia. The company secured the majority of Indian fertilizer sector LNG tenders in the latest round. Shell recorded its ...

Lumen focuses on telemetry from the internet backbone, where the largest ISPs interconnect, to reveal attack patterns that ...

PowMix targets Czech workforce since Dec 2025 using jittered C2 and ZIP phishing, enabling stealthy remote access and ...

I ran one command and found startup apps Windows “forgot” to mention.

OMV Bulgaria has rolled out a new electric vehicle charging network at 21 sites. The move adds EV infrastructure to OMV's ...

A MacOS-focused social engineering campaign orchestrated by North Korea-based threat actor Sapphire Sleet has been exposed by ...

Hackers are exploiting a critical vulnerability in Marimo reactive Python notebook to deploy a new variant of NKAbuse malware ...