IntroductionOn March 12, 2026, Zscaler ThreatLabz discovered a malicious ZIP archive containing military-themed document ...
This trojanized Slack installer looks normal, but quietly gives attackers an invisible desktop to access your accounts and ...
Windows Recall's database may be better protected now, but a new proof of concept suggests the data path after sign in still ...
This week, a "Raccoon"-linked actor hit help desks, Eurail exposed 308K users, Fortinet patched critical flaws, Pushpaganda ...
Windows users are facing a sharper cyber threat after researchers identified a campaign that pairs the long-running Gh0st remote access trojan with CloverPlus adware, giving attackers a mix of covert ...
ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian ...
Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure ...
Three proof-of-concept exploits are being used in active attacks against Microsoft's built-in security platform; two are ...
A bug allowed access to chat histories, source code, and customer data in public projects. The vibe-coding platform says the ...
Lovable's API exposed source code and database credentials for 48 days after the company closed a bug report. Up to 62% of AI ...
ThreatsDay Bulletin: active exploits, supply chain attacks, AI abuse, and stealth data risks observed this week.