- TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit
- 14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
- Microsoft Defender’s Own Driver Can Be Weaponized to Delete Security Software at Boot
- Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet
- Wazuh and AI For Enhanced SOC Workflows
- Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0
- GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure
- Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution
- Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
- Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts
- ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More
- AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure
- New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data
- Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
- Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers
