New Nuclei Discovery and Archive Suite targets smaller organisations struggling with regulatory oversight across digital ...

The data breach on the West Australian government that resulted in the data of children being exposed, as well as an invoice fraud incident that led to $71,000 being stolen, reportedly came from the ...

Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.

AI-powered bot hackerbot-claw exploited GitHub Actions workflows across Microsoft, DataDog, and CNCF projects over 7 days using 5 attack techniques. Bot achieved RCE in 5 of 7 targets, stole GitHub ...

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible code, a technique that’s flummoxing traditional defenses designed to ...

ThreatDown, the corporate business unit of Malwarebytes, today published research documenting what researchers believe to be the first documented case of attackers abusing the Deno JavaScript runtime ...

New ClickFix variant maps WebDAV drive to run trojanized WorkFlowy app, enabling stealth C2 beacon and payload delivery.

Google’s TranslateGemma can run entirely in a web browser, pointing to new possibilities for local AI translation deployment.

Anthropic has launched shared context for Claude's Excel and PowerPoint add-ins, enabling cross-app workflows and reusable one-click Skills for enterprise teams.