News

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

Source: AI News  ·  Published on 2026-07-25

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

Source: AI News  ·  Published on 2026-07-25

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Source: AI News  ·  Published on 2026-07-25

CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking

CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking

Source: AI News  ·  Published on 2026-07-25

Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE

Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE

Source: AI News  ·  Published on 2026-07-25

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

Source: AI News  ·  Published on 2026-07-25

BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

Source: AI News  ·  Published on 2026-07-24

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Source: AI News  ·  Published on 2026-07-24

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

Source: AI News  ·  Published on 2026-07-24

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

Source: AI News  ·  Published on 2026-07-24

Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do

Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do

Source: AI News  ·  Published on 2026-07-24

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry

Source: AI News  ·  Published on 2026-07-24

Golden Chickens Resurfaces With Four New Malware Families and Modular Implants

Golden Chickens Resurfaces With Four New Malware Families and Modular Implants

Source: AI News  ·  Published on 2026-07-24

NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

Source: AI News  ·  Published on 2026-07-24

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

Source: AI News  ·  Published on 2026-07-24

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

Source: AI News  ·  Published on 2026-07-24

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

Source: AI News  ·  Published on 2026-07-23

ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

Source: AI News  ·  Published on 2026-07-23

Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files

Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files

Source: AI News  ·  Published on 2026-07-23

Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge

Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge

Source: AI News  ·  Published on 2026-07-23

China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks

China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks

Source: AI News  ·  Published on 2026-07-23