IntroductionIn December 2025, Zscaler ThreatLabz discovered a campaign linked to APT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima), which is a DPRK-backed threat group. In this campaign ...
Check Point research found three critical flaws in Anthropic's Claude Code that allow attackers to execute arbitrary commands ...
Hackers are hijacking email accounts and sending fake invites that install remote access tools. Even your antivirus may not ...
A convincing lookalike of the popular Huorong Security antivirus has been used to deliver ValleyRAT, a sophisticated Remote Access Trojan (RAT) built on the Winos4.0 framework, to users who believed ...
Four rogue NuGet packages and one npm package stole ASP.NET Identity data, deployed C2 backdoors, and reached over 50,000 ...
Enkrypt AI introduces open-source protection for the AI development supply chain, securing coding assistant Skills ...
The hottest AI tool in the world, OpenClaw, has sparked widespread security concerns across Silicon Valley. Major tech firms ...
Container instances. Calling docker run on an OCI image results in the allocation of system resources to create a ...
Fully airgapped assessment platform with 608 evidence schemas and 10,000+ detection rules now available for pilot. Two ...
The VS Code 1.110 cycle is putting more 'hands-on' capabilities into chat, led by native browser integration that lets AI agents interact with page elements, capture screenshots, and pull real-time ...
Use Windows Sandbox to safely install and test unknown apps in an isolated environment. Protect your PC from malware and ...