ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files

New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage

CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV

Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack

ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories

n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer

New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands

New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password

20+ Hijacked Government Websites Became
an Attack Channel

New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands