NomShub, a vulnerability chain in Cursor AI, allowed attackers to achieve persistent access to systems via indirect prompt ...
A new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability ...
Updated LOTUSLITE targets India banking sector via CHM and DLL side-loading, expanding espionage campaign to South Korea and ...
The prompt-injection issue in the agentic AI product for filesystem operations was a sanitization issue that allowed for ...
A prompt injection flaw in Google’s Antigravity IDE turns a file search tool into a remote code execution vector, bypassing ...
A growing range of native macOS features are being repurposed by attackers to execute code, move laterally and evade ...
Google Antigravity’s increasing popularity has brought the development platform into the crosshairs of researchers and ...
Microsoft is warning of threat actors increasingly abusing external Microsoft Teams collaboration and relying on legitimate ...
The Justice Department has announced the sentencings of two U.S. nationals, Kejia Wang, 42, and Zhenxing Wang, 39, for their ...
Nearly every major product family needs immediate patching, from Windows to Office to Microsoft Edge, SQL Server, and even ...
IntroductionOn March 12, 2026, Zscaler ThreatLabz discovered a malicious ZIP archive containing military-themed document ...
The Ruby vulnerability is not easy to exploit, but allows an attacker to read sensitive data, start code, and install ...