Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour
Markdown Is the New Executable: Attackers Are Dropping Agent Instructions Into Your Downloads Folder From the Web
Apple Blocks Certificates That Could Help Attackers Fake Websites
NordVPN patches "clumsy" Windows bug that let attackers disable system services
Security patches need patches now that attackers have AI
Fake VPN download site steals administrator credentials to give attackers direct access to corporate networks — but delivers official signed software so victims never suspect a thing
Researchers warned attackers could 'defrost the food' months before French supermarkets got hit
Docker Hub flaw let attackers impersonate users, tamper with images
The MFA Gaps Attackers are Still Exploiting
'This is a first for us': Attackers uses poem to infect thousands of servers with malware
Attackers hijacked top-level domains, minted fake security certs for Google and other orgs
'The agent itself has become its own entity to secure': Bitdefender's new free Mac tool goes after flaws that let attackers fool AI models
Malicious VPN config files can let attackers run commands on Asus routers
Attackers have been exploiting critical Zimbra flaw to steal emails
Moscow tightens regulation on SIM market to crack down on fraud and 'attackers' — Anti-Fraud 3.0 could see SIMs sold without money and a massive reduction in SIM card sellers
Hackers breach OpenAI using Claude tools, gaining access to employee accounts and the company's internal codebase — attackers initiated a 'harmless' pull request as proof of the hack
