SVG phishing email attacks are bypassing enterprise email security gateways by hiding JavaScript inside image files and ...

Weedhack malware targets Minecraft players via YouTube and SEO poisoning since Jan 2026, enabling credential theft and remote ...

A threat actor tracked as DriveSurge has been operating large-scale malware distribution campaigns using ClickFix and ...

Fake Claude Code installer malware used Google Ads to place spoofed AI tool pages above real documentation since March 2026.

A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...

SideCopy targeted Afghanistan's Finance Ministry with Xeno RAT via Pashto phishing lures, enabling espionage and system ...

Now sites have a new way to spy on their visitors: measuring subtle interactions with their solid-state drives. The technique ...

A new malware campaign has compromised nearly 2,000 WordPress websites by using Steam Community profile comments to hide ...

Nearly 2,000 WordPress websites were infected with malware that relies on Steam Community profile comments to hide command-and-control (C2) data.

Anthropic, OpenAI, Google, and Meta published prompt injection disclosures in 2026 — but no two measure the same thing. What ...

Cybersecurity researchers at Aikido Security have uncovered a malicious supply chain attack targeting OpenAI Codex developers via the npm package “codexui-android”. While the associated GitHub ...

In today's 2-Minute Tech Briefing, a Windows 11 update broke localhost functionality, disrupting developer workflows just as Windows 10 support ended. Nvidia’s long-awaited DGX Spark “personal AI ...