Stories are attributed to their original publishers and reviewed by an editor before they appear here. Always read the original source.
Talos has identified UAT-11473, a highly sophisticated APT, who exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst Controller instances to by...
Third-party Android app stores can now apply to Google for permission to install apps with one tap, without Android's usual confirmation screens, and to update them in the backgrou...
Attackers are distributing malware through fake ChatGPT and Claude desktop applications, using legitimate, digitally signed executables from OpenAI and Anthropic to load malicious...
AI developers may have a security setting enabled and still end up running attacker-controlled code. Pillar Security has disclosed a high-severity vulnerability in Unsloth’s model...
ESET researchers discover PromptSpy, the first known Android malware to abuse generative AI in its execution flow
The attack involved data-wiping malware that ESET researchers have now analyzed and named DynoWiper
The malware pairs remote access capabilities with ready-made campaign tools, lowering the barrier for full device compromise
ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions
ESET researchers discover another iteration of NGate malware, this time possibly developed with the assistance of AI
LLM-based code scanners won’t help attackers build a nuclear weapon, but that refusal could work in their favor
CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit. The post CISA Warns of Node2Shell Exploitation...
The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the...