Active attacks exploit Metro4Shell (CVE-2025-11953) in React Native CLI to execute commands and deploy Rust malware.

Hackers are targeting developers by exploiting the critical vulnerability CVE-2025-11953 in the Metro server for React Native ...

The initial wave of attacks in December led to hundreds of systems being compromised as state-linked threat groups and other ...

ClickFix uses fake CAPTCHAs and a signed Microsoft App-V script to deploy Amatera stealer on enterprise Windows systems.

RedLine, Lumma, and Vidar adapted in 48 hours. Clawdbot's localhost trust model collapsed, plaintext memory files sit exposed ...

A coordinated campaign has been observed targeting a recently disclosed critical-severity vulnerability that has been present ...

The Supercars champion will return to his home dirt circuit to campaign a 410 Sprintcar across a number of high-profile ...

Agentic AI tools like OpenClaw promise powerful automation, but a single email was enough to hijack my dangerously obedient ...

America’s LLC system is so easy to exploit that it has attracted everyone from scammers to Russian oligarchs to North Korean ...

Russia-linked hacking group Fancy Bear is exploiting a brand-new vulnerability in Microsoft Office, CERT-UA says ...

Attackers could even have used one vulnerable Lookout user to gain access to other Google Cloud tenants' environments.

Cisco patched a critical exploit affecting some of its communication-based products. Designated as CVE-2026-20045, the vulnerability allows bad actors to run arbitrary commands on an affected device’s ...