Hackers exploit ClickFix to deploy malware loaders and Python tunnels on Windows, potentially enabling ransomware attacks.

Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys ...

Fake Apex Accelerator npm packages deliver Windows stealers and a macOS backdoor while redirecting AI agent requests to ...

Browsers blocked eight compromised eMudhra certificate authority keys that could let attackers forge any website.

Kimsuky hackers use fake résumés and malicious links to deploy Funhouse ransomware, gain remote access, and encrypt victims’ ...

Researchers linked the campaign to earlier Kimsuky operations involving Endpoint ransomware. Similarities include reused ...

In mid-October 2026, ProjectDiscovery, known for its vulnerability scanning tools and security verification frameworks, ...

Attackers replaced OVHcloud CLI downloads across five GitHub releases with secret-stealing builds for up to 94 minutes on ...

On October 14, 2026, the SANS Internet Storm Center (ISC) research team published a technical report on the structural ...

Zscaler ThreatLabz has uncovered a July 2026 campaign that hides malware in a trojanized Terraform provider. It targets ...

ConnectWise is scrambling to restore its Cloud Backup, SaaS Security, and Cloud Management services after hackers abused a compromised credential to access customers’ M365 tenants. The company ...

Hackers used AI-generated code to target government Linux servers, steal credentials, access emails and databases and evade ...