ANY.RUN has introduced in-browser data inspection for URL analysis, giving security analysts a browser-level view of how phishing pages behave after a suspicious link is…
Dropping Elephant is using a malicious Windows shortcut, DLL side-loading, and a scheduled task named GoogleErrorReport to keep a new memory-resident remote access trojan active…
CISA has added three critical Ubiquiti UniFi OS vulnerabilities to its Known Exploited Vulnerabilities catalog, warning federal agencies to act by June 26, 2026. The…
Cisco has patched a critical vulnerability in Cisco Unified Communications Manager and Unified Communications Manager Session Management Edition that can let a remote, unauthenticated attacker…
A large credential-harvesting campaign known as FortiBleed has targeted more than 430,000 FortiGate firewalls globally, according to SOCRadar’s Dismantling FortiBleed report. The campaign did not…
Scammers are using fake GTA 6 early-access websites to trick gamers into sending cryptocurrency for a game download that does not exist. The pages promise…
Claude Fable 5 generated the core of a bootable NT-shaped kernel in Rust in 38 minutes of active model work, according to a Tolmo report…
A malicious AI agent skill built for a controlled security experiment reached more than 26,000 agents after passing security scanners and gaining credibility through public…
Hackers are using unpatched on-premises SharePoint servers as an entry point for ransomware attacks, credential theft, remote access, and custom backdoors, according to a new…
A new security analysis says several agentic red-team AI tools share design weaknesses that can let attackers steal API keys, compromise worker containers, persist across…
February 10, 2026
1 comment 
