U.S., U.K., and Dutch agencies say Iran’s intelligence service uses Telegram-controlled Windows malware to spy on dissidents ...

BambooToken uses MQTT for C2 across Windows and Linux, with a dozen compromised entities detected in Asia and South America.

LiteSpeed Enterprise before 6.3.7 has a flaw that can let a low-privilege website user gain root access; exploitation is unknown.

UTA0560 exploited a Chrome-Windows zero-day chain against NGOs to deploy GRIMWEDGE; APT31 used the same chain to install LONGTALE.

KREMLIN targets Brazilian bank users with malicious Chrome and Edge extensions that steal credentials, session tokens, ...

WordPress will automatically review plugin releases and block high-risk updates after a backdoor was caught before ...

Microsoft details a million-email CEO fraud campaign and passkey-themed attacks that compromised cloud accounts and enabled ...

This week: rogue AI agents, a zero-click WeChat worm, PaperCut attacks, AI-powered espionage, exploit chains, rootkits, and ...

AI-related SOC alerts rose 685% from February to June 2026, with 94.1% classified as noise and 5.8% as genuine security risks ...

A report links OpenAI agents to a RubyGems campaign that abused RubyDoc for RCE and published more than 2,000 packages in May ...

Anthropic disrupted GTG-20006, a Russian state-sponsored actor that used Claude to rebuild malware after security products ...

See why severity alone doesn't reveal risk. Learn how autonomous penetration testing and Breach360 prove which ...