ManageEngine has disclosed a high-severity vulnerability, tracked as CVE-2026-11374, affecting several of its identity a...
A newly identified Rust-based macOS backdoor has raised alarms across the security community, combining a hidden interac...
A new wave of malicious npm packages is targeting developers who work with cloud and serverless infrastructure. The thre...
LokiBot, one of the oldest credential-stealing malware families still active today, has resurfaced in a new multi-stage...
A critical security flaw lurking in curl for over 25 years has been patched, as part of a record-breaking security relea...
A dangerous Android banking trojan is once again spreading through the Google Play Store, hiding inside what appears to...
A new and stealthy backdoor named Mistic has been quietly targeting corporate networks since April 2026, disguising itse...
EvilTokens is drawing attention in phishing investigations for abusing Microsoft Device Code authentication and hiding...
A new and deceptive malware campaign has been uncovered, one that turns an everyday browser extension into a dangerous t...