A powerful iPhone exploit kit called Coruna appears to have started as a Western government-grade capability before spreading to Russian spies and Chinese cybercriminals. Google…
Apache ZooKeeper has disclosed two important-severity vulnerabilities that administrators should patch quickly. The flaws can expose sensitive client configuration data in log files and weaken…
Anthropic has sued the U.S. government after the Pentagon labeled the company a “supply chain risk,” escalating a high-stakes fight over how far the military…
OpenClaw’s rapid rise on GitHub has turned into something else entirely: a live stress test for vulnerability disclosure at scale. In just a few weeks,…
SAP has released 15 new security notes for March 2026, and two of them fix critical vulnerabilities that could let attackers take control of affected…
CISA has warned that a recently patched Ivanti Endpoint Manager vulnerability is now being exploited in real attacks. The flaw, tracked as CVE-2026-1603, lets a…
A new phishing campaign is pushing signed malware disguised as Microsoft Teams, Zoom, Adobe Reader, and other familiar workplace apps. Microsoft says the attackers used…
A China-linked cyber-espionage campaign targeted organizations in Qatar almost immediately after the latest Middle East conflict escalated. Public reporting says the operation used war-themed lure…
A malicious npm package has surfaced under the name @openclaw-ai/openclawai, and researchers say it impersonates an OpenClaw installer while stealing passwords, browser data, SSH keys,…
Researchers have built a system called ScamAgent that can carry out realistic, multi-turn scam conversations with very little human input. The project, described in an…
November 21, 2025
1 comment 
