Anthropic and EPFL show AI mind viruses can spread through persistent agent prompt files, while a one-paragraph warning cuts spread to near zero.

Cavern uses DNS A records to switch between direct HTTPS and Google Apps Script for C2, expanding an Iranian-linked toolkit ...

City Forum uses one server to pull records from over-permissive Salesforce and ServiceNow guest portals across industries for over a year.

A suspected China-nexus actor exploits CVE-2026-59310, compromising an estimated 361 IPs in 47 countries and gaining root ...

An unpatched Unisoc modem flaw lets code with a VoLTE foothold modify Android kernel memory on T606, T612, and T7250 chipsets ...

A weekly look at exploited flaws, exposed systems, supply-chain attacks, browser abuse, malware campaigns, and the security risks that mattered most.

Evooo1Bot exploits known flaws to infect Linux edge devices, then adds SOCKS5 proxying, SSH brute force, credential theft, ...

MCP servers can leak enterprise secrets through plaintext config files or prompt injection. Learn the main risks and how to ...

How agentic AI tools threaten modern DevOps pipelines and why combining strict execution controls with immutable backups is ...

SAP Commerce Cloud CVE-2026-58231 sees exploitation attempts three days after the patch; the CVSS 10.0 flaw could allow ...

Trump memo directs NCC to let vetted U.S. firms conduct approved cyber surveillance and disruption operations against foreign ...

Apple alerts suspected mercenary spyware targets in 110 countries, expanding threat notifications that have reached users in ...