Do Son McAfee researchers found a massive malware campaign using LLMs to "vibe code" 1,700+ fake downloads. From Roblox mods to AI tools, your PC is the target.
Trend Micro reveals how an exposed Spring Boot Actuator and a spreadsheet of plaintext secrets led to a malware-less SharePoint data exfiltration attack.
Microsoft releases emergency update KB5085516 to fix a critical bug falsely claiming users are "offline." Restore access to OneDrive, Teams, and Copilot now.
Microsoft plans a 2026 Windows 11 overhaul, moving the Start menu to a native framework. But will the coercive Microsoft account mandate finally be broken?
Beware of "MacSync Stealer": A new macOS malware campaign using SEO poisoning and terminal commands to hijack crypto wallets and system keys.
Researchers uncovered StoatWaffle, a new Node.js malware by North Korean hackers targeting developers via malicious VSCode repositories to steal data.
This week in cybersecurity: 1,348 new vulnerabilities discovered, including seven critical 10.0 CVSS flaws and the highly active DarkSword exploit chain.
Google uncovers DarkSword, a sophisticated iOS full-chain exploit used globally to deploy spyware via zero-day vulnerabilities. Update to iOS 26.3 now.
The FBI warns that Iran's MOIS is weaponizing Telegram as a Command-and-Control hub to deploy malware against global dissidents and journalists.
Rockwell Automation issues an urgent warning: disconnect industrial controllers from the internet immediately to protect against active threat actors.
Bitdefender uncovers a malicious Windsurf IDE extension using the Solana blockchain as an unblockable C2 to steal developer credentials and source code.
Nokia researchers uncover the Katana botnet, a Mirai variant using custom rootkits to hijack unmanaged Android TV boxes in a massive IoT turf war.
The FBI and CISA warn that Russian Intelligence is using sophisticated phishing to hijack Signal and other messaging apps via linked device features.
Eclypsium researchers reveal how compromised IP-KVM switches bypass EDR and software security to grant attackers total, BIOS-level system takeover.
CISA adds 5 actively exploited flaws to its KEV catalog, including a critical 10.0 CVSS Craft CMS bug and Apple zero-days linked to DarkSword malware.
Cloudflare CEO Matthew Prince warns that AI bot traffic will soon eclipse human users. Discover the data behind the 2026 internet traffic paradigm shift.
Google is recalibrating Project Mariner as "browser agents" lose ground to high-velocity programming tools like OpenClaw. Inside the 2026 AI agent shift.
OpenAI is building a desktop "Super App" merging ChatGPT, Codex, and its Atlas browser. Discover how Fidji Simo is pivoting to fight Anthropic in 2026.
An ITC judge has cleared Apple’s Watch workaround. Discover how offloading blood oxygen math to the iPhone bypassed Masimo’s patents and averted an import ban.
Meta has rescinded the death sentence for Horizon Worlds VR. Discover why the platform is entering "maintenance purgatory" as resources shift to generative AI.
Jeff Bezos is raising $100 billion to acquire and AI-automate heavy industries like aerospace and defense. Discover the secrets of his "Project Prometheus."
Google is testing a standalone Gemini app for Mac featuring "Desktop Intelligence." Discover how Gemini will "see" your screen to rival ChatGPT and Claude.