Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access

When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted

Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root

DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT

CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises

18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users

Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts

INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws