news

A sophisticated supply chain attack, leveraging a compromised Visual Studio Code extension, has led to the exfiltration of thousands of private repositories from GitHub. The incident highlights the escalating risks assoc

A critical SQL injection flaw in Ghost CMS is being actively exploited to inject malicious JavaScript, leading to widespread "ClickFix" attacks targeting over 700 websites across various sectors. Published: 2026-05-25 |

Network Detection and Response (NDR) systems are evolving beyond their "noisy" reputation, with agentic AI capabilities now enabling faster threat detection, improved triage, and a significant reduction in false positive

A sophisticated, coordinated supply chain attack, dubbed "TrapDoor," has infiltrated major code repositories like npm, PyPI, and Crates.io, distributing malware designed to pilfer sensitive developer credentials and secr

New cross-platform malware, RemotePE, is being deployed by the Lazarus Group to conduct long-term espionage against financial and cryptocurrency entities, prioritizing stealth and minimal forensic footprint. Published: 2

A critical SQL injection flaw in Drupal Core, recently patched by the content management system's developers, has been officially recognized by CISA as a significant threat due to ongoing exploitation attempts. Published