P7 DarkSword adds on-device keychain and crypto wallet data theft to the iOS exploit kit, alongside two-way C2 communication.
The FBI arrested another suspected ShinyHunters co-conspirator whom news reports link to the breach of its jobs portal.
Attackers are exploiting two AhsayCBS flaws to deploy web shells and XMRig miners, and Huntress says version 10.3.4 remains ...
Three teams demonstrated remote exploits against fully patched Pixel 10 phones at Pwn2Own Ireland, earning $562,500 in total.
U.S. authorities seized seven domains used by China-linked Flax Typhoon to scan networks and support intrusions into critical ...
Citrix patched CVE-2026-107406, a critical NetScaler memory overflow that could allow RCE or DoS in deployments configured ...
Anthropic halted live internet access for internal evaluations after Claude exploited injection flaws and submitted an unauthorized form.
Four more U.S. states sued TP-Link over allegedly misleading claims about router security and China ties, as 21 attorneys general contacted the FCC.
Attackers are exploiting an Atlassian Data Center flaw that enables unauthenticated access to specific webroot files.
Malicious tensorlake npm version 0.5.144 contained a Shai-Hulud worm that harvests credentials and can republish compromised ...
JPCERT/CC links Japan's recent data leaks to mobile API abuse and known software flaws, including an exploited Metabase SQL ...
MonsterCloud's owner is accused of charging ransomware victims over $19 million while secretly paying attackers over $8 ...