ScarCruft spreads BirdCall via sqgame.net since late 2024, targeting Android users, enabling surveillance and data theft.

Publicly released exploit code for an effectively unpatched vulnerability that gives root access to virtually all releases of ...

Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...

An exploit has been published for a local privilege escalation vulnerability dubbed "Copy Fail" that impacts Linux kernels ...

U.S. cybersecurity agency CISA says the CopyFail bug is being actively used in hacking campaigns, and poses a major risk to servers and datacenters that rely on Linux.

DEEP#DOOR embeds a Python RAT in a dropper script, using bore[.]pub C2 to steal credentials and evade Windows defenses, ...

A stealthy Python-based backdoor framework capable of long-term surveillance and credential theft has been identified ...

Python has become a go-to language for cybersecurity pros thanks to its simplicity, vast library ecosystem, and ability to ...

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...

The CloudZ Trojan steals data through Microsoft Phone Link. The campaign has been active since at least January 2026.  Follow ...

Joey Melo explains how he uses jailbreaking and data poisoning to manipulate AI guardrails and harden machine learning models ...