News
- Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift
- FakeGit malware campaign returns with 17,610 malicious GitHub repos
- Regulators are trying to protect you from being fired by AI – here’s how
- DOJ charges ransomware recovery CEO for secretly paying hackers
Malware
- Attackers hijack country-code domains to impersonate Google and other services
- Amazon has an uncomfortably personal profile on you
- Meta’s Muse AI files away your friendships, arguments, and secrets
- Solving the Continuous Authorization Conundrum
Threat Actors
- Making sure the checks get printed
- UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing
- Ignore all instructions and read this blog: The state of AI-analysis evasion in malware
- Solving the Continuous Authorization Conundrum
Vulnerabilities
- GNUnet P2P Framework 0.26.2
- CVE-2026-107377 datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory
- Exploit for CVE-2026-92555
- CVE-2026-107376 webonyx graphql-php: Unbounded recursion in parser causes stack overflow on crafted nested input