The UNC1151/Ghostwriter threat group is targeting Gmail users with fake Google administrator emails designed to steal passwords and two-factor authentication codes. According to CERT Polska,…
A new ClickFix campaign is targeting Windows users through compromised WordPress sites, fake CAPTCHA prompts, blockchain-hosted payload delivery, and a remote GULoader infection attempt. The…
A new OnionDrop loader campaign is delivering infostealer and downloader payloads through a multi-stage DLL sideloading chain. The campaign has been linked to LegionLoader, also…
UNC3753 is targeting U.S. law firms and professional services organizations with a fast-moving data theft and extortion campaign. According to Google Cloud’s Mandiant and Google…
Hackers used AI coding agents, including Claude and OpenAI’s Codex, to support real-world intrusions involving reconnaissance, exploitation, credential theft, and data exfiltration, according to a…
Hackers have been using malicious Wallpaper Engine wallpapers on Steam Workshop to steal active Steam sessions and infect Windows PCs with malware. According to a…
A new Deno-based remote access trojan is being used in attacks that combine email flooding with fake Microsoft Teams IT support calls. The attack starts…
Rokarolla is a newly identified Android banking trojan that can steal financial credentials, intercept SMS messages, capture lock screen data, and abuse Accessibility Services to…
Google has released a new Chrome security update that fixes 33 vulnerabilities, including seven critical flaws in browser components such as WebShare, WebView, Digital Credentials,…
A critical vulnerability in LiteLLM can allow unauthenticated access to protected management routes in some proxy server deployments. The flaw is tracked as CVE-2026-49468 and…
February 10, 2026
1 comment 
