Lunex uses BYOVD to disable kernel security callbacks before stealing browser credentials and cryptocurrency wallets.

ShinyHunters-linked attackers exploit CVE-2026-35273 in Oracle PeopleSoft, bypassing WAF rules to deploy web shells on dozens ...

METR says an attacker bypassed authentication on an agentic app, obtained an API key, and used $600,000 in tokens over three ...

Elementor 4.3.0 and 4.3.1 contain a CSRF flaw that can create an admin account when a logged-in administrator opens a crafted ...

CISA adds exploited SharePoint RCE and RouterOS flaws to KEV; the RouterOS chain can give unauthenticated administrative ...

Kiteworks urges a nine-hour precautionary shutdown after federal intelligence warned a threat actor may target some systems.

Cybersecurity researchers have flagged a new version of PamStealer that ensures that the main payload can only be recovered ...

GitHub disabled two actions-cool Actions again after re-enabled repositories left malicious May 18 tags able to execute ...

PamStealer now uses live key exchange to block static payload recovery and is delivered through a fake Wavel macOS download.

AI is compressing attacker retry cycles while SOC handoffs lose context, making shared operational memory central to faster defense.

Bitget says suspected North Korean actors stole $351.6 million after compromising a backend wallet system and spoofing ...

The vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a pre-authentication SQL injection in the virtuser_query ...