Attackers abused a compromised credential from ConnectWise Cloud Backup (formerly SkyKick) to access Microsoft 365 customer ...
GhostAction attackers have compromised 94 GitHub repositories with a second-stage payload that disguises credential-stealing JavaScript as a font file. The campaign abuses Visual Studio... Indian ...
Anthropic says an internal Claude research model identified how the NSA generated seeds for five prominent NIST elliptic curves in under 30 minutes, resolving a cryptographic provenance mystery.
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a separate out-of-bounds write to obtain root privileges.
Indian authorities have warned that the SideCopy advanced persistent threat group is targeting Indian organisations, ...
The U.S. Cybersecurity and Infrastructure Security Agency has added a critical Palo Alto Networks PAN-OS vulnerability, ...
A suspected China-linked espionage group exploited a critical BeyondTrust Remote Support zero-day to compromise appliances, ...
Hackers are delivering LegionLoader through an executable inflated to 882,716,672 bytes, roughly 842 MiB, to challenge ...
A critical WordPress exploit chain dubbed WP2Shell lets unauthenticated attackers run arbitrary code on vulnerable websites ...
A critical Linux kernel networking vulnerability dubbed PwnEscape lets researchers escape virtual machines and run ...
An exposed attacker toolkit that reveals how AI agents supported a PaperCut exploitation campaign, including a second remote ...
MITRE has released ATT&CK v20, expanding its Enterprise framework with techniques covering prompt injection, AI-enabled data ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results