Cybersecurity news from across the internet
Cybersecurity news from across the internet
A new worm-like malware toolkit named SCKit was deployed in the recent ScreenConnect attacks targeting managed service providers (MSPs), designed to spread from infected customer devices to MSP technicians' computers and…
A new campaign dubbed 'wfx-loot' has unfolded on GitHub where threat actors used 4,837 compromised accounts to probe 61,764 repositories, open pull requests, and push secrets-stealing malware. [...]
Trained to betray: How post-training supply chain attacks hijack coding agents
Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors
LABScon26 Replay | Let’s Get Physical: Why Cybersecurity Needs Hardware-Based Security to Survive AI
PHP2Shell Exploitation on Check Point Gateway
VU#580079: Arbitrary file read/write vulnerability in ImageMagick-based applications with default configuration
VU#685399: PromZard context key code injection leads to remote code execution
VU#944667: ComfyUI-Easy-Use contains unauthenticated path traversal vulnerability
Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)
Report: Online Scams Nearly Doubled in 2026
The Hidden Relay: Inside a Device Code Phishing Kit That Never Shows the Code
LEGO’s BrickLink taken offline: What users should know
FTC and 17 States Secure $63 Million Settlement with Family Dollar Stores in Price Transparency Win for Consumers
.gif)
