A critical vulnerability in Microsoft Edge has been discovered that allows remote attackers to execute arbitrary code on victim systems through specially crafted web content. The flaw, affecting multiple versions of the Chromium-based browser, exploits a memory corruption issue in the browser’s rend
Dashlane, a prominent password manager, has disclosed that attackers successfully brute-forced two-factor authentication (2FA) protections to access and download encrypted password vaults belonging to specific users. While the downloaded vaults remain encrypted and require master passwords to decryp
Security researchers have discovered critical bypass techniques that defeat malicious skill detection systems deployed by ClawHub, Cisco, and Vercel. Attackers can now upload malicious AI skills and agents that evade scanning mechanisms designed to protect users from harmful AI behavior. The vulnera
HexStrike AI v6.0 has emerged as a comprehensive red team platform integrating 127 security tools with the BOAZ red team engine. This unified framework combines reconnaissance, exploitation, post-exploitation, and lateral movement capabilities into a single AI-driven interface. While marketed as a l
Pink Gang, a financially motivated threat actor group, has adopted the social engineering playbook pioneered by the notorious Lapsus$ collective. The group is now deploying fake helpdesk phone calls to trick employees into surrendering their credentials, combining old-school vishing (voice phishing)
Brave Software has launched Origin, a subscription-based browser that removes cryptocurrency wallets, AI features, and ads while maintaining core privacy protections. Priced at $4.99/month or $49.99/year, Origin targets users seeking a streamlined browsing experience without monetization schemes. Th
Cybercriminals are cloning legitimate cybersecurity tool websites—specifically Ghidra, dnSpy, and SpiderFoot—to distribute malware to security professionals and developers. These sophisticated clones mimic official sites and use typosquatting domains to trick victims into downloading trojanized vers
The Cybersecurity and Infrastructure Security Agency (CISA) is facing a substantial $250 million budget reduction following congressional appropriations decisions, sparking intense political debate between House Democrats and Republicans. This significant funding cut threatens to impact critical cyb
Popular VPN browser extension Hola was compromised through a supply chain attack that delivered cryptocurrency mining malware to Windows users. The malicious version of the software silently installed XMRig cryptominer on victim systems, hijacking CPU resources to mine Monero cryptocurrency. Users w
Elon Musk’s X Corp (formerly Twitter) has intensified efforts to terminate Federal Trade Commission privacy audits mandated by a 2011 consent decree. The company argues the audits are overly burdensome and politically motivated, while the FTC maintains they’re necessary to verify compliance with dat