Expel links CylindricalCanine to DigiCert's April 2026 breach, where stolen certificates were used to sign Zhong Stealer and ...

Cursor IDE zero-day vulnerability: AI security firm Mindgard spent seven months trying to report a Windows code-execution ...

Attackers created at least 292 fake GitHub repositories that impersonated developer tools and redirected users to ...

ACR Stealer campaigns use ClickFix lures, JPEG steganography, and WebDAV to steal browser tokens, passwords, PDFs, and synced ...

A security researcher using the "Nightmare Eclipse" handle has released a Windows zero-day exploit dubbed LegacyHive that ...

A large-scale phishing operation has been observed disguising a malicious script as a TrueType font file (.tff). Using the ...

Learn how to use the Arch User Repository (AUR) safely. Discover the lessons from the June 2026 AUR malware attack and ...

Researchers say a Windows vulnerability in Cursor could automatically execute code when a GitHub repository is opened, ...

Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint ...

CISA added CVE-2026-48939 and CVE-2026-56291 to its Known Exploited Vulnerabilities catalog after automated attackers ...

Binding, and Silo-Binding techniques abuse Windows filesystem virtualization features to present trusted files to security ...

CrashStealer, a newly documented Mac infostealer, used an Apple-notarized meeting app to reach victims before stealing ...