PureLogs Stealer uses fake PDF JavaScript files and Google's Blogger pages in the VEIL#DROP campaign, enabling fileless ...

Mastra AI’s 144 JavaScript packages was executed in just 88 minutes by North Korea’s Sapphire Sleet hacking group, which ...

IntroductionOn May 14, 2026, the Zscaler ThreatLabz team identified unusually high activity associated with the threat actor SmartApeSG to deploy malware. During our examination, we discovered ...

Microsoft has patched an actively exploited Exchange Server vulnerability that allows threat actors to execute arbitrary JavaScript code in cross-site scripting (XSS) attacks targeting Outlook Web ...

The new “agentjacking” attack takes almost no real hacking ability to pull off. It's predicated on pulling a public ...

It's the 1,000th day of war since a Hamas-led attack on Israel sparked the war in Gaza. A ceasefire took effect on Oct. 10. Israeli forces now control over half ...

Ukraine said its forces destroyed a key railway bridge in Crimea, as it seeks to isolate the Russian-occupied peninsula.

Microsoft details AutoJack exploit chain targeting AutoGen Studio MCP WebSocket in pre-release builds, enabling ...

The UK’s healthcare sector is being “stress-tested to breaking point," with a tenfold increase in attacks during January-May ...

Iran launched drone and missile attacks today targeting Bahrain and Kuwait in response to U.S. airstrikes that hit the ...

Securonix says PureLogs infection starts with a fake PDF JavaScript file and uses PowerShell, fileless .NET loading, and LOLBins.

Footage shows the moment a wild elephant attacked a bus carrying air force personnel in Sri Lanka. The incident happened in ...