ThreatDown, the corporate business unit of Malwarebytes, today published research documenting what researchers believe to be ...

In November 2025, Gartner formalized a new security category — Exposure Assessment Platforms — evaluating 20 vendors on their ...

New ClickFix variant maps WebDAV drive to run trojanized WorkFlowy app, enabling stealth C2 beacon and payload delivery.

A new malware strain dubbed Slopoly, likely created using generative AI tools, allowed a threat actor to remain on a compromised server for more than a week and steal data in an Interlock ransomware ...

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible code, a technique that’s flummoxing traditional defenses designed to ...

AI-generated Slopoly malware used by Hive0163 in 2026 attacks maintained access for over a week, highlighting how AI ...

GhostClaw poses as an OpenClaw installer package, stealing system credentials and sensitive data before deploying a persistent RAT.

A few years back, after several rewrites and readings with professional actors, I submitted a gay-themed comedy TV pilot to an agent/friend. His response was as swift as it was shocking. “Disturbing,” ...

Skia graphics lib and V8 JavaScript engine brings browser's tally of actively exploited bugs to three in 2026 Google has pushed out an emergency Chrome update to fix two previously unknown ...

Polyfill supply chain attack that hit more than 100,000 websites has now been linked to North Korean threat actors.

Hackers exploited a compromised npm package to breach cloud systems and gain full AWS administrator access within 72 hours.