"Context bombs" can frustrate AI-driven attacks, researchers foundHelp Net Security·Jul 14, 00:00 UTC · Jul 14, 2026Vulnerability30
Friday Squid Blogging: "Squidbleed" VulnerabilitySchneier on Security·Jul 10, 21:07 UTC · Jul 10, 2026Vulnerability130
The fake report message that ends with a stolen Reddit accountHelp Net Security·Jul 9, 00:00 UTC · Jul 9, 2026Malware30
20 Open-Source Cybersecurity Tools To Keep Your Team Ready For AnythingHelp Net Security·Jul 8, 00:00 UTC · Jul 8, 2026Vulnerability30
Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo DataThe Hacker News·Jul 7, 14:07 UTC · Jul 7, 2026Exploit / PoC145
Scripting the disassembler: Local agentic reverse engineering through vbdec’s live COM object modelCisco Talos·Jun 18, 10:00 UTC · Jun 18, 2026Vulnerability130
Chainguard, BNY Team Up to Secure Open Source from AI ThreatsInfosecurity Magazine·Jun 16, 11:00 UTC · Jun 16, 2026Vulnerability30
Introducing EvidenceForge: Synthetic security logs that don’t look (as) fakeCisco Talos·May 27, 10:00 UTC · May 27, 2026AI safety & security30
New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network PivotsThe Hacker News·May 12, 14:29 UTC · May 12, 2026Malware30
TrickMo Variant Routes Android Trojan Traffic Through TONInfosecurity Magazine·May 11, 15:15 UTC · May 11, 2026Malware30
Styra DAS extends OPA policy-as-code guardrails to public, private and hybrid cloud configurationsHelp Net Security·Apr 17, 12:52 UTC · Apr 17, 2026AI safety & security30
Image or Malware? Read until the end and answer in comments :)Security Affairs·Apr 5, 14:07 UTC · Apr 5, 2026Malware30
Google limits Android accessibility API to curb malware abuseHelp Net Security·Mar 19, 00:00 UTC · Mar 19, 2026Malware30
Advanced Protection Mode in Android 17 prevents apps from misusing Accessibility ServicesSecurity Affairs·Mar 16, 10:34 UTC · Mar 16, 2026Malware30
Who is the Kimwolf Botmaster “Dort”?Krebs on Security·Feb 28, 12:37 UTC · Feb 28, 2026Vulnerability30
Pompelmi: Open-source secure file upload scanning for Node.jsHelp Net Security·Feb 2, 00:00 UTC · Feb 2, 2026Malware30
Google Gemini Prompt Injection Flaw Exposed Private Calendar Data via Malicious InvitesThe Hacker News·Jan 20, 07:00 UTC · Jan 20, 2026AI safety & securityCVE-2026-0612CVE-2026-0613CVE-2026-0615+2 CVEs35
Superagent: Open-source framework for guardrails around agentic AIHelp Net Security·Dec 29, 00:00 UTC · Dec 29, 2025AI safety & security30
Clipping Scripted Sparrow's wings: Tracking a global phishing ringHelp Net Security·Dec 18, 00:00 UTC · Dec 18, 2025Phishing & fraud30
Frogblight banking Trojan targets Android users in TurkeyKaspersky Securelist·Dec 15, 07:00 UTC · Dec 15, 2025Malware30
Meta Removes 63,000 Instagram Accounts Linked to Nigerian Sextortion ScamsThe Hacker News·Nov 20, 16:45 UTC · Nov 20, 2025Ransomware45
Cybercrime ring GXC Team dismantled in Spain, 25-yearSecurity Affairs·Oct 12, 09:21 UTC · Oct 12, 2025Malware30
OpenAI’s Sora 2 Copyright Infringement Machine Features Nazi SpongeBobs and Criminal Pikachus404 Media·Oct 2, 16:15 UTC · Oct 2, 2025AI safety & security30
Microsoft Flags AI-Driven Phishing: LLM-Crafted SVG Files Outsmart Email SecurityThe Hacker News·Oct 2, 06:36 UTC · Oct 2, 2025Phishing & fraud30
AI-Generated Code Used in Phishing Campaign Blocked by MicrosoftInfosecurity Magazine·Sep 29, 16:45 UTC · Sep 29, 2025Threat actor145
Friday Squid Blogging: Squid-Shaped UFO Spotted Over TexasSchneier on Security·Aug 15, 00:00 UTC · Aug 15, 2025Data breach45
Malvertising campaign leads to PS1Bot, a multiCisco Talos·Aug 12, 20:00 UTC · Aug 12, 2025Threat actor45
Australian Regulator Alleges Financial Firm Exposed Clients to UnaccepInfosecurity Magazine·Jul 22, 12:01 UTC · Jul 22, 2025Policy & legal30
Shamoon Malware, cyber espionage tool, cyber weapon or ...Security Affairs·Jun 14, 18:25 UTC · Jun 14, 2025Malware30
Inside a Dark Adtech Empire Fed by Fake CAPTCHAsKrebs on Security·Jun 12, 23:32 UTC · Jun 12, 2025Vulnerability30
China-linked APT41 used Google Calendar as C2 to control its TOUGHPROGRESS malwareSecurity Affairs·May 29, 11:17 UTC · May 29, 2025Malware30
New Microsoft accounts will be "passwordless by default"Help Net Security·May 2, 00:00 UTC · May 2, 2025Vulnerability30
GOFFEE’s recent attacks: new tools and techniquesKaspersky Securelist·Apr 10, 10:00 UTC · Apr 10, 2025Vulnerability130
DOGE to Fired CISA Staff: Email Us Your Personal DataKrebs on Security·Mar 20, 18:53 UTC · Mar 20, 2025Malware30
Large-Scale Malicious App Campaign Bypassing Android SecurityInfosecurity Magazine·Mar 18, 13:00 UTC · Mar 18, 2025Threat actor45
Experts Flag Security, Privacy Risks in DeepSeek AI AppKrebs on Security·Feb 6, 21:59 UTC · Feb 6, 2025Vulnerability30
FireScam Android Malware Poses as Telegram Premium to Steal Data and Control DevicesThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2025Malware30
How to Lose a Fortune with Just One Bad ClickKrebs on Security·Dec 29, 20:08 UTC · Dec 29, 2024Phishing & fraud30
PUMAKIT, a sophisticated rootkit that uses advanced stealth mechanismsSecurity Affairs·Dec 15, 16:11 UTC · Dec 15, 2024Malware30