FCC bans foreign routers after security findings warn of supply chain risks and cyberattacks on infrastructure, impacting ...

Russian authorities arrested the alleged admin of LeakBase, a cybercrime forum operating since 2021 that enabled trading ...

AI agents executed 80–90% of espionage tasks in 2025; compromised agents bypass kill chain, enabling stealth access and data ...

GlassWorm uses Solana and Google Calendar dead drops to deliver RAT stealing browser data and crypto wallets, impacting ...

Malicious LiteLLM 1.82.7–1.82.8 via Trivy compromise deploys backdoor and steals credentials, enabling Kubernetes-wide ...

TA551 botnet infected 72 U.S. firms via spam malware, enabling $14.17M ransomware extortion, leading to prison sentences.

Device code phishing targets 340+ Microsoft 365 orgs since Feb 2026 via OAuth abuse, enabling persistent token hijacking and ...

Valentić told The Hacker News that the use of fake progress indicators mimicking legitimate installation progress and the ...

Google Ads malvertising spreads ScreenConnect malware using Huawei driver flaw, enabling EDR bypass and credential theft in U ...

CVE-2025-32975 exploited since March 2026 on unpatched KACE SMA systems, enabling admin takeover and payload delivery.

FAUX#ELEVATE phishing deploys stealers and miners via fake resumes, targeting enterprise systems, enabling rapid credential ...

Two more GitHub Actions workflows have become the latest to be compromised by credential-stealing malware by a threat actor ...