Microsoft assigned CVE-2026-21520 to a Copilot Studio prompt injection vulnerability and patched it in January — but in ...
PHANTOMPULSE spreads via Obsidian plugin abuse in REF6598 campaign, targeting finance and crypto users, bypassing AV controls ...
Sonatype®, the leader in AI-driven DevSecOps, today unveiled the Q1 2026 Open Source Malware Index, identifying 21,764 malicious open source packages in the first quarter of the year and bringing the ...
Compromised Context.ai integration let attackers inherit Vercel employee access and reach internal systems, exposing a ...
Bitwarden CLI 2026.4.0 was compromised via GitHub Actions in Checkmarx campaign, exposing secrets and distributing malicious ...
For many companies, the most valuable assets on the balance sheet are not the ones it fully captures. They are buried in source code, ...
Financial institutions are rexamining how to manage emerging fraud risks, and deepfake-enabled identity fraud can be particularly complex.
The liquid restaking protocol said the compromised verifier was LayerZero's own infrastructure, and the setup it was faulted ...
Mythos combined four separate low-severity bugs into a complete browser sandbox escape. Traditional scanners evaluate ...
IntroductionOn March 12, 2026, Zscaler ThreatLabz discovered a malicious ZIP archive containing military-themed document lures targeting Chinese-speaking individuals. Our analysis of this sample ...
Toshiba Electronics Europe has started engineering sample shipments of a new automotive motor control device that integrates ...