A zero-day in Windows Defender lets attackers seize full control of any Windows PC — with no patch yet available. Plus: 144 poisoned npm packages, a CVSS 10.0 Joomla flaw, and a hacker who stayed inside a network for 33 days after his server went offline.
The ClickFix technique has evolved into a sophisticated malware delivery industry — three new loader families this week alone. Plus: three critical Fortinet zero-days being actively exploited, Cisco SD-WAN compromised in the wild, and a cPanel plugin flaw added to CISA's 'must-patch' list.
A China-linked group spent a year inside research networks by silently rewiring Google Workspace email forwarding. No password stolen, no malware dropped — just quiet redirection. Plus: a Palo Alto VPN bypass, 152 fake Chrome extensions, and backdoored WordPress plugins.
Operation Ramz took down Sniper Dz — a platform that let anyone rent a complete phishing kit for a few dollars a month. 201 arrests across 13 countries. Plus: 400+ Arch Linux packages hijacked to steal credentials, and Europol dismantles a €336M crypto laundering service.
ShinyHunters exploited an Oracle PeopleSoft zero-day for 13 days before the company even knew it existed. Meanwhile: a ransomware group that spreads like a worm, GitHub's plan to fix npm's biggest security problem, and a flaw that bypasses Windows BitLocker.
It's a record-breaking Patch Tuesday — 206 vulnerabilities fixed, including three zero-days already being used in attacks. Plus: China's 1,500-device botnet and critical Ivanti, Fortinet, and SAP patches you shouldn't skip.
Researchers found that AI coding tools like Claude Code and Cursor can be tricked into running attacker code by poisoning a Sentry error report. Plus: a Chrome zero-day confirmed in the wild, and Vietnamese hackers with a supply chain twist.
Researchers built a self-replicating worm that spreads between AI agents using only local models — no internet connection, no network traffic, nothing to detect. Plus: North Korea's fake job recruiter malware and a critical LiteLLM admin takeover bug.
China-linked hackers replaced Linux login software with backdoored copies in 2016 — and nobody noticed until now. Plus: a Microsoft 365 AI flaw that stole emails via a real microsoft.com link, and a critical Splunk hole with no auth required.
Washington ordered Anthropic to cut foreign access to two AI models over a jailbreak — while Chinese hackers quietly backdoored Linux login software for nearly a decade. Plus: a Microsoft 365 flaw hiding behind a real Microsoft link.