-
Microsoft has warned that the EvilTokens phishing-as-a-service platform has become a major driver of AI-enabled device-code phishing, compromising more than 12,000 email inboxes across over 10,000 organizations worldwide since emerging in February 2026…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A threat actor linked to the ongoing Graphalgo software supply-chain campaign has expanded beyond npm and PyPI, using malicious Terraform providers and Go modules to deliver a targeted Go-based remote access trojan (RAT). The activity is significant be…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
NVIDIA has released version 2.0 of its Infrastructure Controller to address 14 vulnerabilities found in its Linux-based infrastructure management software. This update includes a critical flaw involving hard-coded credentials and multiple issues that c…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
ManageEngine has addressed a critical remote code execution vulnerability in ADSelfService Plus, which could allow an unauthenticated attacker to execute arbitrary code as NT AUTHORITY\SYSTEM from the Windows device’s logon screen. This vulnerability, …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
WordPress has released version 7.1.2 to address a critical path-traversal vulnerability, tracked as CVE-2026-87902, which could allow unauthenticated remote code execution (RCE) under specific server and theme configurations. This flaw carries a CVSS v…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google released Chrome version 154 to the Stable channel for Windows, macOS, and Linux, fixing 108 security vulnerabilities. This update addresses 11 critical flaws, including memory-safety issues in the ANGLE, GPU, and WebGL components, which could be…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A detailed Microsoft SharePoint vulnerability, tracked as CVE-2026-65660, allows authenticated, low-privileged users to execute arbitrary code on vulnerable on-premises SharePoint servers. Initially categorized as a spoofing issue, technical analysis s…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
OpenAI’s new ChatGPT Computer History feature for macOS aims to enhance AI assistance by making it more context-aware. However, it also creates a potential risk of local data leaks that macOS-based infostealers could exploit. This feature convert…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cisco Duo is the best MFA for most buyers comparing on price and speed published per-user tiers, a free small-team floor, and device trust included while Microsoft Entra MFA wins outright wherever M365 licensing already covers it. This comparison price…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cisco Talos has released CAIRN, an open-source research toolkit that helps defenders hunt, classify, and track malware that uses artificial intelligence in attack operations. The Cognitive Artifact Intelligence Research Network uses a metadata-first ap…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
