Malware

Apple’s upcoming macOS 27 will exclusively support Apple Silicon processors, officially ending support for Intel-based Macs. This architectural shift eliminates an entire class of x86-64 vulnerabilities, significantly reduces the operating system’s attack surface, and forces security teams to reasse

GitHub has taken down over 70 repositories linked to Microsoft following a suspected worm infection that compromised multiple code repositories. The mass removal has caused widespread CI/CD pipeline failures across numerous projects that depended on these repositories. The incident highlights the ca

Threat actors have developed a sophisticated malware campaign targeting WordPress sites, leveraging Steam’s gaming platform as an unconventional command-and-control (C2) channel. This innovative technique abuses Steam’s public profile features to hide malicious commands in plain sight, evading tradi

The C0XMO botnet is actively targeting DD-WRT routers through known vulnerabilities, establishing persistent footholds on compromised devices. Unlike typical botnets, C0XMO actively hunts and terminates competing malware, securing exclusive control over infected systems. The campaign demonstrates so

A sophisticated email compromise targeting a stock exchange executive’s Microsoft Outlook account remained undetected for five months, with attackers establishing persistent access to exfiltrate credentials and sensitive communications. The breach leveraged compromised credentials and stealthy inbox

Cisco has released security patches for CVE-2026-20230, a critical SQL injection vulnerability in Unified Communications Manager (UCM) with a CVSS score of 9.8. The flaw allows unauthenticated remote attackers to execute arbitrary SQL queries and potentially gain complete system control. With proof-

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added multiple Android and Linux Kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, signaling active exploitation in the wild. Federal agencies must patch these flaws by the mandated deadline, while privat

An international law enforcement operation has successfully dismantled nine organized crime groups operating illegal streaming services across multiple countries. The coordinated crackdown resulted in numerous arrests, server seizures, and the shutdown of platforms that illegally distributed copyrig

A critical vulnerability in Visual Studio Code’s URI handling mechanism allows attackers to steal GitHub OAuth tokens through a single click. By exploiting the `vscode://` protocol handler and the GitHub Pull Requests extension, threat actors can craft malicious links that trigger automatic authenti