PhantomCore exploited three TrueConf flaws since September 2025, enabling remote access and lateral movement across Russian ...

Hackers are exploiting two authentication bypass vulnerabilities in the Qinglong open-source task scheduling tool to deploy ...

CVE-2026-32202 actively exploited after April 27 advisory fix, exposing NTLMv2 hashes via zero-click SMB authentication.

Microsoft and the US Cybersecurity and Infrastructure Security Agency (CISA) warned that attackers are exploiting a ...

CISA orders urgent patching of a Windows Shell flaw actively exploited in zero-click attacks. Federal agencies must update by ...

Microsoft's partial patching in February 2026 of a zero-day vulnerability abused by Russian state-sponsored threat group ...

An OpenSSH vulnerability introduced 15 years ago could allow attackers to obtain full root shell access to vulnerable servers ...

The emerging ransomware has been deployed in the TeamPCP supply chain attacks, but victims should think twice before paying ...

A threat group tracked as UNC6692 uses social engineering to deploy a new, custom malware suite named 'Snow' which includes a ...

Serbia is playing a dangerous game with the West. While the European Union and the United States are pursuing a partnership with and EU membership for Serbia, Serbia is cultivating a rapidly expanding ...

Incomplete patch for a Windows SmartScreen and Windows Shell security prompts bypass created a new bug enabling zero-click ...

AI coding agents are now indispensable. Claude Code, Codex, and Hermes write code, call APIs, run commands, and automate workflows at extraordinary speed. But to do their jobs, they need credentials ...