Disrupts AI-powered exploit-driven attacks earlier in the attack chainEnables security teams to prioritize remediation based on real attacker activity—not severity scoresAutomatically translates explo ...

Ghost CMS SQL injection campaign has compromised 700+ websites — including Harvard University, Oxford University, and DuckDuckGo — using a CVSS 9.4 flaw to inject ClickFix malware lures that trick ...

Sites belonging to major universities such as Harvard and Oxford, as well as DuckDuckGo, have been compromised in the attack.

Ghost CMS flaw CVE-2026-26980 enabled attacks on 700+ sites, injecting ClickFix malware through fake CAPTCHA pages.

Lazarus Group has deployed RemotePE, a fully memory-resident trojan that is extremely hard for traditional antivirus and forensic tools to detect.

Developer platform Socket says a malware called TrapDoor is targeting crypto and AI developers across npm, PyPI and Crates, aiming to steal crypto wallet info and browser data.

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious ...

Packagist packages hid malicious package.json scripts, enabling Linux binary execution during installs and workflows.

A Ukrainian drone attack has caused a fire at a Russian oil terminal, according to officials in Russia’s Krasnodar region. The incident occurred overnight in Novorossiysk, where falling drone debris ...

A failed cyberattack resulted in North Dakota's Information Technology Department unintentionally sending an email ...

The FBI’s Criminal Justice Information Services facility in Clarksburg honored fallen officers Thursday morning. Among those ...