BlueNoroff uses fake Zoom and Teams meetings to profile crypto wallets, hijack Telegram accounts, and deliver Windows and ...
Certighost exploit lets a domain user obtain a Domain Controller certificate and reach DCSync through a vulnerable AD CS ...
Two Bing image search flaws let crafted SVGs run commands as SYSTEM on Windows workers & root on Linux before Microsoft fixed ...
An operator ran the Hermes AI agent with approval prompts disabled during a Thai finance ministry intrusion, then left its ...
AgentForger could let a phishing link forge, publish, and schedule a rogue ChatGPT Workspace Agent with access to connected ...
Redis ships seven security releases after authenticated RESTORE RCE PoCs target versions 6.2.22, 7.4.9, 8.6.4, and 8.8.0.
CERT-UA links UAC-0099 to a fake Notepad++ plugin that deploys BURNYBEAR and MATCHBOIL.V2, with persistence running every ...
AI agent visibility alone cannot enforce least privilege, requiring identity-centric, intent-aware, platform-agnostic ...
NodeBB fixes eight flaws Aikido rates high severity, including bugs exposing admin pages, private messages, and federation ...
Attackers abuse compromised GitHub repos and hosted runners to target cPanel and WHM via CVE-2026-41940, using 583 workflows ...
Synthetic identity fraud has a machine-side equivalent: fabricated NHIs. Learn how synthetic machine identities are built & ...
This week’s ThreatsDay Bulletin covers malicious packages, fake apps, AI prompt attacks, exposed systems, weak defaults, and stealthy malware traffic.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results