Attackers abuse Node.js to execute malicious scripts and deploy payloads in attacks targeting governments, technology ...

Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.

These technologies are likely used by you every day but you probably never hear their names. They resolve domains, encrypt ...

Nimbus Manticore uses trojanized coding challenges to deploy NodeRabbit and PollCat RATs across Windows, Linux, and macOS.

There is no new OWASP list in 2026: the Top 10:2025 is the current standard. All 10 risks explained, what changed since 2021, and the four categories one compromised script can trigger at once. The ...

Ubiquiti UniFi SAB-067 patches 22 critical vulnerabilities -- three rated CVSS 10.0, the maximum severity -- targeting ...

Discover the top 7 open-source penetration testing tools tailored for DevOps teams in 2026. Enhance security and streamline testing within your Continuous Integration/Continuous Deployment (CI/CD) ...

Gambit Security's threat intelligence team has published a detailed account of the Aurora ransomware operation, including six ...

Because 'trust me' isn't a permission model for your AI coding agent.

Discover the best open-source vulnerability scanners of 2026 that help CIOs minimize security costs while ensuring robust protection against software vulnerabilities. Learn about their features and ...

Microsoft Threat Intelligence identified a “TerminalFix” social engineering campaign designed to deploy a custom Python-based ...

LibreOffice 26.8 open-source office suite is now available for download with numerous new features, improvements, and bug ...