Companies urged to treat cameras and their management platforms as potential entry points and secure them better.

CrowdStrike said the China-nexus adversary VAPOR PANDA used the AI-driven ARTEX intrusion framework, run primarily on the ...

Hello, this is the Committee for the Eradication of Hassle!This time, I'm talking about a rather troublesome issue I ...

What has been officially confirmed includes unauthorized access, data exfiltration, extortion demanding money, and reports of ...

APT41 BlackX UEFI bootkit breached diplomatic networks in Tajikistan, Uzbekistan, and Turkmenistan in early 2026 by exploiting CVE-2022-21894 -- a Secure Boot bypass Microsoft patched in 2023 but ...

This week delivered critical firewall patches, rented banking malware, weaponized PDFs, and zero-permission token theft alongside supply-chain hijacks and AI-powered attacks. Attackers borrowed trust ...

Hackers use fake FedEx tax invoices to spread Sirius Backdoor, a stealthy Windows malware that hides inside blank PDF ...

Microsoft publishes its own list of removable Windows 11 apps. Here is what is on it, what to keep, the built-in ways to ...

Fake ChatGPT and Claude desktop apps on GitHub use signed OpenAI and Anthropic executables to load Yoba malware and a ...

A malware campaign known as Yoba targets users by leveraging the popularity of AI tools like ChatGPT and Claude to trick them ...

Attackers have used fake ChatGPT and Claude desktop applications hosted on GitHub to distribute a malware chain that abuses ...

What Candiru's COM hijacking tells defenders about detection after the initial compromise By Ian Davila, Director of Adversary Emulation, Tidal Cyber TL;DR Citizen Lab's October 2026 AdFection report ...