Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure
OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files
Documentation placeholder domain used in ClickFix attacks
4 sources in the wild
New Carbonato malware uses AI agents to hijack exposed Docker hosts
MacSync under the microscope: new delivery methods and a new payload
Macfinger ClickFix campaign, (Tue, Sep 22nd)
Re: CVE-2026-95831: Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL
4 sources in the wild
SectopRAT Returns, Hiding Inside a Legitimate Application
in the wild
GitHub has not removed malicious imitation software after 3 weeks
Operation Conflict Compass: Konni Targets Ukraine via Malicious LNK Lures
3 sources in the wild
Malicious npm packages evade install-script defenses at runtime
The Closed Quorum: Inside the first reported autonomous AI C2 implant
13 sources 15 min
The Malware Hiding in Developer Tools That Turned Terraform Providers Into Attack Paths
The Domains Keep Disappearing, but the Malware Infrastructure Behind Them Never Moves
in the wild 11 min
AI-Powered Threats Exploit Digital Trust Through Autonomous Breach Techniques
A Fake Streaming App Turned Android Phones Into Remote-Controlled Devices
WordPress Malware Uses Hidden Plugin and Blockchain C2 to Stay Undetected
GPT-6 Astra Breaks an Old Enigma Message
Critical MaxKB AI Agent Flaw Lets Prompt Injection Execute System Commands
in the wild 4 min2
Jun Kim, oMLX creator and maintainer, joins Hugging Face to support the MLX community
in the wild
Cybercriminals Are Hiding New Malware in Torrents for Popular Films
in the wild
North Korea’s job interview scam runs both ways
Dominican Republic Leak, Celestial Malware, Money Network Sale, CVV Auction, and US VPN Access
North Korean Hackers Posed as Recruiters. They Infected 30k Devices Worldwide
in the wild