A free agentic AI red-team checklist offers 222 tests across 20 attack categories to assess autonomous AI systems beyond prompt injection.

CastleStealer upgrades target Windows users, bypassing browser encryption, executing remote commands and stealing sensitive ...

Hackers abuse a trojanized Terraform provider to spread cross-platform malware and steal developer secrets, cloud credentials ...

Warden Stealer spreads via fake downloads and ads, stealing passwords, browser data and crypto wallets with a built-in ...

A new GhostAction campaign has compromised 346 GitHub repositories after threat actors used two hijacked maintainer accounts ...

Anthropic has introduced OSS Scanner, a free service that checks critical open-source repositories for security vulnerabilities and sends findings directly to project maintainers.

A public PoC exposes a Telegram Desktop flaw that enables local file theft and account takeover via crafted links.

A fake Android PDF reader on Google Play gained 10,000+ installs while delivering Anatsa banking malware to steal financial ...

Citrix has urged customers to patch a critical security flaw in NetScaler ADC and NetScaler Gateway that could allow remote code execution or cause a denial of service. Tracked as CVE-2026-107406, the ...

VirusTotal added daily public IPv4 scanning to help security teams detect C2 servers and track malware infrastructure.

Cisco Talos warns autonomous AI agents could enable stealthy, persistent cyberattacks by coordinating tasks and targeting ...

Microsoft urges organizations to test PKI, HSMs and security appliances for post-quantum authentication before deploying new cryptography.