OpenAI has expanded its Trusted Access for Cyber program and introduced GPT-5.4-Cyber, a more cyber-permissive variant of GPT-5.4 built for vetted defenders. The model is…
A signed software operation tied to Dragon Boss Solutions LLC left more than 23,000 infected systems exposed after an update domain in its infrastructure was…
Microsoft has fixed a publicly disclosed zero-day in Microsoft Defender that could let a local attacker raise privileges to SYSTEM, the highest level of access…
A new ransomware operation called JanaWare is targeting users in Turkey through a tailored version of the Adwind remote access trojan. Acronis Threat Research Unit…
Microsoft has patched a Windows BitLocker vulnerability that could let a local attacker bypass a security feature on a vulnerable machine. The flaw, tracked as…
Triad Nexus, a cybercrime network linked to the FUNNULL ecosystem, has rebuilt part of its fraud infrastructure after U.S. sanctions and now uses more than…
Agentic AI browsers can turn a single malicious webpage into something much more dangerous than a normal browser exploit. Varonis Threat Labs says these browsers…
Attackers who break into Microsoft 365 accounts are increasingly using mailbox rules to spy on email, hide warnings, and forward sensitive messages outside the company.…
A supply chain attack hit the WordPress plugin ecosystem after a buyer acquired a portfolio of widely used plugins and slipped in malicious code that…
Threat actors are using Google Cloud Storage URLs to host fake Google Drive pages, steal login details, and then deliver Remcos RAT to Windows systems.…
November 21, 2025
1 comment 
