Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments

Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development

Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline

Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization

Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats

The Top 10 Attack Surface Exposures in 2026

144 Mastra npm Packages Compromised via Hijacked Contributor Account

CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution

Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting

ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures