- DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware
- ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories
- Azure Cosmos DB Flaw Exposed Platform-Wide Key That Could Access Any Database
- Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents
- The Network Has Become the Control Plane for AI Security
- Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts
- SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT
- Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation
- FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks
- Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet
- Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data
- Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads
- Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
- Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
- Coordinated Cyberattack Targets 30+ Minnesota Water Systems as One Plant Goes Offline
