Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking

Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do

Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry