Do Son Critical dYdX supply chain attack: Compromised npm & PyPI packages steal seed phrases & deploy RATs. Remove @dydxprotocol/v4-client-js immediately.
Critical Payload CMS flaw CVE-2026-25544 (CVSS 9.8) allows SQL injection via JSON fields. Unauthenticated attackers can steal admin tokens. Update to v3.73.0.
Zscaler reveals Marco Stealer, a new malware harvesting crypto & cloud files. It uses AES-256 encryption & kills analysis tools. Learn how to detect it.
Criminal IP Integrates with IBM QRadar to Deliver Real-Time Threat Intelligence Across SIEM and SOAR
Criminal IP Integrates with IBM QRadar to Deliver Real-Time Threat Intelligence Across SIEM and SOAR
cybernewswire
Torrance, United States / California, 9th February 2026, CyberNewswire
Apple targets stability with iOS 27, a "Snow Leopard" style update. Discover the new Siri AI chatbot and the 2026 roadmap for a swifter, smarter iPhone.
Microsoft clarifies that Windows 11 isn't killing old printers. While V3/V4 drivers are leaving Windows Update, manual installation remains a viable lifeline.
Google Voice now demands a government ID to curb gray-market scammers. Learn what changed, who it affects, and how to verify your account.
Fortinet warns of critical SQL injection CVE-2026-21643 in FortiClient EMS 7.4.4. Unauthenticated attackers can execute code. Update to v7.4.5 now.
X pilots "Collaborative Notes," using Grok AI to draft instant fact-checks for human review. Truncate misinformation latency with AI-speed annotations.
Apple is opening CarPlay to third-party AI like ChatGPT and Gemini. Discover the 2026 roadmap for sophisticated, conversational co-pilots in your car.
Crypto.com’s Kris Marszalek spent $70M on AI.com to debut personal AI agents at Super Bowl LX. Transition from chat to agents that actually "get things done."
Critical SandboxJS flaws (CVSS 10.0) allow sandbox escape & host takeover via prototype pollution. Update to v0.8.29 immediately to stop code execution.
The EU Commission preliminarily finds TikTok's design addictive and in breach of the DSA. The app faces massive fines and a mandatory interface overhaul.
Darktrace finds Mac malware using a fake "Compatibility Wizard" to trick users. The AppleScript attack bypasses TCC to drop a Node.js backdoor.
Google’s Quick Share is ending the "green bubble" file barrier. Learn how the 2026 rollout brings AirDrop compatibility to Samsung and Snapdragon devices.
Cisco Talos exposes DKnife, a router malware that inspects traffic and swaps legitimate downloads for ShadowPad backdoors. Active since 2019.
The prominent single-board computer manufacturer, Raspberry Pi, has formally announced a revised pricing strategy precipitated by the...
TGR-STA-1030 (UNC6619) hits 70+ orgs in 37 countries. The Asia-based group uses the new ShadowGuard eBPF rootkit to hide in Linux kernels.
Critical BeyondTrust flaw CVE-2026-1731 (CVSS 9.9) allows unauthenticated RCE on Remote Support & PRA appliances. Update to v25.3.2 immediately.
Stan Ghouls group targets Uzbekistan via fake court emails and malicious Java loaders. Learn how they deploy NetSupport RAT to spy on victims.
Critical Jinjava flaw CVE-2026-25526 (CVSS 9.8) breaks sandbox security. Attackers can execute Java code via template loops. Update to v2.8.3 now.
Rublevka Team's "scam-as-a-service" has stolen $10M+ in crypto. Their automated Solana drainers target Phantom & Solflare wallets. Don't be next.