A supply-chain attack compromised more than 30 npm packages under Red Hat's namespace, distributing a new variant of the Shai-Hulud credential-stealing malware called Miasma.
The DriveSurge threat actor has launched extensive malware distribution campaigns leveraging ClickFix and FakeUpdate techniques by compromising thousands of websites.
Password manager Dashlane has disclosed a brute-force attack targeting two-factor authentication, resulting in encrypted vault downloads for fewer than 20 personal subscribers.
Palo Alto Networks has disclosed an authentication bypass vulnerability in PAN-OS and Prisma Access that is actively exploited to enable unauthorized VPN connections.
BTMOB, an Android remote access trojan, is now available as a malware service featuring a builder interface that allows attackers to generate custom phishing payloads.
GreyVibe, a threat group believed to be Russian, has been utilizing AI-generated phishing lures and customized malware in cyberattacks against Ukrainian entities.
Anthropic has announced plans to release its Claude Mythos-class AI models to the public after postponing their launch to address security concerns affecting public and private...
A Canadian man received a 33-year prison sentence after pleading guilty to an eight-year sextortion campaign targeting more than 145 children in the United States.
A new threat actor named JINX-0164 employs recruitment-themed social engineering and custom macOS malware to target cryptocurrency firms, aiming to steal digital assets.
A critical SQL injection flaw in Ghost CMS is actively exploited in a large-scale campaign to inject malicious JavaScript, initiating ClickFix attack techniques. Security teams are...
June 2, 2026
June 2, 2026
