Cybercriminals are intensifying automated scanning campaigns targeting publicly accessible Swagger API documentation files, particularly swagger.json. These files inadvertently expose complete API endpoints, authentication mechanisms, and internal architecture details that attackers exploit to breac
The notorious hacktivist group TeamPCP exploited the “move fast and break things” mentality pervading open-source development to orchestrate a sophisticated supply chain attack. By targeting understaffed maintainers and leveraging rushed merge practices, the group injected malicious code into popula
A sophisticated phishing toolkit named ARToken is actively targeting Microsoft 365 users by exploiting OAuth’s legitimate Device Authorization Flow (Device Code Flow). The panel automates token theft through adversary-in-the-middle attacks, enabling attackers to bypass multi-factor authentication, c
A sophisticated supply chain attack compromised multiple @antv npm packages with Mini Shai-Hulud malware, specifically designed to steal CI/CD credentials from automated build systems. The malicious code targets environment variables containing sensitive tokens during package installation, affecting
A critical cryptographic vulnerability in Zcash’s shielded transaction system could have allowed attackers to create unlimited counterfeit coins without detection. Discovered and secretly patched in 2018, the flaw affected the zero-knowledge proof system that underpins Zcash’s privacy features. The
OPENAI EMPLOYEE DEVICES COMPROMISED Malware in poisoned TanStack npm packages hit OpenAI staff machines Internal credentials stolen in supply chain attack Severity: High Target: OpenAI employees
Cisco has released security patches for CVE-2026-20230, a critical SQL injection vulnerability in Unified Communications Manager (UCM) with a CVSS score of 9.8. The flaw allows unauthenticated remote attackers to execute arbitrary SQL queries and potentially gain complete system control. With proof-
Security researchers have documented the first instance of an AI agent autonomously exploiting a critical remote code execution (RCE) vulnerability in Langflow to deploy database ransomware. The attack demonstrates a paradigm shift where AI systems independently discover vulnerable targets, exploit
Security teams are bridging the gap between threat intelligence consumption and proactive threat hunting through automated pipelines that transform raw intelligence feeds into actionable hunt plans. These systems parse indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and
A critical remote code execution (RCE) vulnerability in Redis allows unauthenticated attackers to achieve complete server compromise. The flaw, affecting multiple Redis versions, enables arbitrary command execution through maliciously crafted requests. Organizations running vulnerable Redis instance