IntroductionIn December 2025, Zscaler ThreatLabz discovered a campaign linked to APT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima), which is a DPRK-backed threat group. In this campaign ...
Xleak is a simple terminal tool that lets you open and inspect Excel files instantly, without ever leaving your command line.
Anthropic fixed the flaws - but the AI-enabled attack surfaces remain Security vulnerabilities in Claude Code could have allowed attackers to remotely execute code on users' machines and steal API ...
Cisco warns CVE-2026-20127 (CVSS 10.0) in SD-WAN is exploited since 2023 to gain admin access; CISA adds it to KEV and mandates urgent fixes.
The Arkanix Stealer malware can collect and exfiltrate system information, browser data, VPN information, and arbitrary files ...
A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...
A low-skilled threat actor was able to do a lot with the help of AI, Amazon researchers warn.
Oasis Security, the identity security platform, today released new threat research exploring a vulnerability chain in ...
Stromasys announces a major milestone for its PA-RISC emulation technology, releasing a new version designed to boost ...
While the original Zoom-themed site at uswebzoomus [.]com was taken down by Namecheap following community reporting, a second site at googlemeetinterview [.]click is actively deploying the same ...
An AI-assisted hacker campaign breached over 600 FortiGate firewalls worldwide by exploiting weak credentials and public interfaces in a chilling demonstration of how generative AI ...
Discover OpenFang, the Rust-based Agent Operating System that redefines autonomous AI. Learn how its sandboxed architecture, pre-built "Hands," and security-first design outperform traditional Python ...