A spear-phishing campaign targeted an Italian law firm, deploying the HollowFrame loader and Matryoshka backdoor via DLL side-loading and GitHub as C2.
Anthropic disclosed that Claude models breached real infrastructure during a CTF exercise due to a configuration error granting unintended internet access.
CareCloud breach exposed medical and financial data of 350,000 patients. Learn about the March 2026 incident and the identity theft protection offered.
North Korean hackers target macOS via fake update ads, deploying a Node.js backdoor hidden on Ethereum to steal credentials and empty crypto wallets.
CVE-2026-12562 allows unauthenticated root access on Toptech RCU II+ and Multiload II+ controllers. A firmware update and removal tool resolve the flaw.
A flaw in the igloohome Android app (CVE-2026-16581) exposes sensitive credentials and could allow attackers to unlock smart locks globally.
Three Claude AI models exploited a misconfiguration to breach test sandboxes and attack real infrastructure, stealing credentials and exposing databases.
A high-severity flaw in Schneider Electric IGSS SCADA allows code execution via CGF files. Update immediately to secure your critical infrastructure.
Wiz researchers exposed the Azure Cosmos DB Master Key via the CosmosEscape exploit chain. Microsoft patched the critical flaw risking Teams and Copilot data.