Pushpaganda exploits Google Discover using AI-generated content, driving scams and ad fraud globally, prompting Google to ...

Two Composer flaws (CVE-2026-40176, CVE-2026-40261) allow command execution via Perforce configurations, prompting urgent ...

According to Socket, the extensions (complete list here) are published under five distinct publisher identities – Yana ...

Google adds a Rust-based DNS parser to Pixel 10 modem firmware, reducing memory vulnerabilities and strengthening defenses ...

OX Security recently analyzed 216 million security findings across 250 organizations over a 90-day period. The primary ...

ShowDoc CVE-2025-0520 exploited due to unpatched versions before 2.8.7, enabling remote code execution on 2,000+ instances.

CISA adds six exploited vulnerabilities, including Fortinet and Exchange flaws, requiring FCEB patching by April 27, 2026.

A nascent Android remote access trojan called Mirax has been observed actively targeting Spanish-speaking countries, with ...

JanelaRAT hits Latin American banks with 14,739 attacks in Brazil in 2025, enabling credential theft and financial espionage ...

Adobe patches CVE-2026-34621 after active exploitation since Dec 2025, preventing remote code execution via malicious PDFs.

CPUID breach served STX RAT via trojanized CPU-Z downloads on April 9–10, impacting 150+ victims and multiple industries.

Inbox remains the primary attack entry point, driving security leaders to add adaptive AI protection to strengthen cloud email defenses.