CVE-2026-22679 exploited via debug endpoint in Weaver E-cology before 20260312, enabling RCE and system compromise.
CLI-Anything generates SKILL.md files that AI agents trust and execute. Snyk found 13.4% of agent skills contain critical ...
The CloudZ Trojan steals data through Microsoft Phone Link. The campaign has been active since at least January 2026.  Follow ...
The North Korean hacker group APT37 has been delivering an Android version of a backdoor called BirdCall in a supply-chain ...
ESET researchers have investigated an ongoing attack by the ScarCruft APT group that targets the Yanbian region via ...