ThreatLabz reveals how China-nexus actor Mustang Panda weaponized Middle East conflict lures to deploy a stealthy PlugX backdoor within 24 hours.
Check Point Research unmasks Handala Hack (Void Manticore), an Iranian MOIS threat actor using AI scripts and NetBird for destructive wiping attacks.
Zimperium's zLabs exposes PixRevolution, a novel Android banking trojan using real-time surveillance to hijack Brazil's PIX instant payments.
Trellix uncovers a stealthy, fileless Remcos RAT campaign utilizing process hollowing to execute entirely in memory and evade traditional security.
Hunt Intelligence unmasks APT28's 'Roundish' toolkit from an exposed server, revealing advanced CSS side-channel attacks and stealthy Linux implants.
BitSight exposes RondoDox, a relentless IoT botnet using a "shotgun approach" with 174 exploits to hijack residential devices for massive DoS attacks.
Bitdefender exposes a malvertising campaign targeting developers searching for Claude Code. Fake Google Ads deploy Windows stealers and macOS backdoors.
Google Chrome zero-days and a CVSS 10.0 building controller flaw top this week's 1,388 new CVEs. Patch the perimeter before threat actors automate the exploit.
Microsoft and Samsung are investigating a Windows 11 bug that blocks C drive access on Galaxy Books. Learn about the February 2026 update causing these errors.
Apple’s "HomePad" smart display is reportedly finished but delayed until September 2026. Discover why Siri’s AI overhaul is holding back the new smart home hub.
Apple’s iOS 27 will reportedly skip a major redesign in favor of an "incremental refinement": a systemwide slider to control the divisive Liquid Glass effects.
BlueVoyant exposes Blitz Brigantine's new tactics: using email bombing, Microsoft Teams lures, and covert DNS MX tunneling to deploy AOBackdoor.
Blurring the Lines: How Iranian State Hackers are Weaponizing RaaS and the Cybercriminal Underground
Check Point Research reveals Iranian state hackers (Void Manticore) are weaponizing RaaS and criminal malware like Rhadamanthys for plausible deniability.
Black Lotus Labs uncovers KadNap, a stealthy P2P botnet infecting over 14,000 Asus routers to fuel the Doppelgänger dark web proxy network.
SentinelOne DFIR reveals how attackers exploit FortiGate NGFW flaws to extract credentials, abuse Active Directory, and establish persistent network access.
Tenable exposes "LeakyLooker"—9 cross-tenant flaws in Google Looker Studio that let hackers manipulate and exfiltrate GCP data. Google has patched them.
SafeBreach Labs releases PoC exploit code for EventLogin (CVE-2025-29969), a TOCTOU flaw in Windows MS-EVEN RPC allowing remote file writes. Patch now.
Meta partners with global news giants like Le Figaro and News Corp to boost Meta AI's real-time accuracy. Discover the $50M deals reshaping the AI landscape.
Parallels Desktop confirms Windows 11 runs on the $599 MacBook Neo. Discover how the A18 Pro chip handles virtualization and why 8GB RAM is the ultimate bottleneck.
After a developer hit an $82k debt in 48 hours, Google AI Studio has added spending limits. Learn how to set your fiscal guardrails and protect your account.
Google has ended years of hesitation by announcing native Chrome support for Linux ARM64 in Q2 2026. Discover the impact on AI hardware like NVIDIA DGX SPARK.
Mozilla has extended Firefox 115 ESR support for Windows 7/8.1 until August 2026. Discover why Firefox remains the last secure browser for legacy OS users.