NomShub, a vulnerability chain in Cursor AI, allowed attackers to achieve persistent access to systems via indirect prompt ...

PHANTOMPULSE spreads via Obsidian plugin abuse in REF6598 campaign, targeting finance and crypto users, bypassing AV controls ...

PowMix targets Czech workforce since Dec 2025 using jittered C2 and ZIP phishing, enabling stealthy remote access and ...

Hackers are exploiting a critical vulnerability in Marimo reactive Python notebook to deploy a new variant of NKAbuse malware ...

North Korea's Sapphire Sleet uses fake job offers and phony Zoom updates to deliver ClickFix attacks that steal credentials ...

The CVSS‑9.3 vulnerability allows unauthenticated remote code execution on exposed Marimo servers and was exploited in the wild shortly after disclosure, Sysdig says.

A new malware family named 'AgingFly' has been identified in attacks against local governments and hospitals that steal ...

CERT-UA links the AgingFly credential-stealing campaign to phishing, browser theft, and modular remote access.

OpenAI's Codex desktop app now controls your Mac, runs its own browser, and generates images in a new update released today.

April 16, 2026) - Daployi announced the official launch of its self-hosted edge device management platform, providing DevOps and operations teams with a centralized solution for managing distributed ...

Perched nearly a kilometer above the Hula Valley, facing Mount Hermon and literally contiguous with Israel’s northern border ...

A joint advisory by U.S. federal agencies warns of Iranian-affiliated cyber attacks on critical infrastructure, including ...