Beware of "MacSync Stealer": A new macOS malware campaign using SEO poisoning and terminal commands to hijack crypto wallets and system keys.
Researchers uncovered StoatWaffle, a new Node.js malware by North Korean hackers targeting developers via malicious VSCode repositories to steal data.
This week in cybersecurity: 1,348 new vulnerabilities discovered, including seven critical 10.0 CVSS flaws and the highly active DarkSword exploit chain.
Google uncovers DarkSword, a sophisticated iOS full-chain exploit used globally to deploy spyware via zero-day vulnerabilities. Update to iOS 26.3 now.
The FBI warns that Iran's MOIS is weaponizing Telegram as a Command-and-Control hub to deploy malware against global dissidents and journalists.
Rockwell Automation issues an urgent warning: disconnect industrial controllers from the internet immediately to protect against active threat actors.
Bitdefender uncovers a malicious Windsurf IDE extension using the Solana blockchain as an unblockable C2 to steal developer credentials and source code.
Nokia researchers uncover the Katana botnet, a Mirai variant using custom rootkits to hijack unmanaged Android TV boxes in a massive IoT turf war.
The FBI and CISA warn that Russian Intelligence is using sophisticated phishing to hijack Signal and other messaging apps via linked device features.
Eclypsium researchers reveal how compromised IP-KVM switches bypass EDR and software security to grant attackers total, BIOS-level system takeover.
CISA adds 5 actively exploited flaws to its KEV catalog, including a critical 10.0 CVSS Craft CMS bug and Apple zero-days linked to DarkSword malware.
Cloudflare CEO Matthew Prince warns that AI bot traffic will soon eclipse human users. Discover the data behind the 2026 internet traffic paradigm shift.
Google is recalibrating Project Mariner as "browser agents" lose ground to high-velocity programming tools like OpenClaw. Inside the 2026 AI agent shift.
OpenAI is building a desktop "Super App" merging ChatGPT, Codex, and its Atlas browser. Discover how Fidji Simo is pivoting to fight Anthropic in 2026.
An ITC judge has cleared Apple’s Watch workaround. Discover how offloading blood oxygen math to the iPhone bypassed Masimo’s patents and averted an import ban.
Meta has rescinded the death sentence for Horizon Worlds VR. Discover why the platform is entering "maintenance purgatory" as resources shift to generative AI.
Jeff Bezos is raising $100 billion to acquire and AI-automate heavy industries like aerospace and defense. Discover the secrets of his "Project Prometheus."
Google is testing a standalone Gemini app for Mac featuring "Desktop Intelligence." Discover how Gemini will "see" your screen to rival ChatGPT and Claude.
The Rust-Powered Brain: Why OpenAI Just Acquired Astral to Build the First True AI Software Engineer
OpenAI acquires Astral, the creators of Ruff and uv. Discover how Rust-powered tools will transform Codex from a code generator into a full AI software engineer.
Google's 2026 "Anti-Fraud Crucible" introduces a 24-hour wait and mandatory reboots for sideloading. Discover how Limited Distribution Accounts save hobbyists.
Netwrix issues an urgent advisory for critical vulnerabilities in its Password Secure platform allowing arbitrary code execution. Update to v26.3.100 now.
QNAP warns of a critical 9.3 CVSS flaw (CVE-2026-22898) allowing remote attackers to bypass authentication and access QVR Pro surveillance systems. Patch now.