Elastic Security Labs has detailed a Mexican banking fraud campaign that uses fake verification pages to infect Windows users with a PowerShell toolkit called SCMBANKER.…
A newly reported APT-C-20 campaign uses a malicious Word document, COM hijacking, image steganography, and memory-only execution to launch a fileless C# backdoor on Windows…
AI coding agents such as Claude Code, Cursor, and OpenAI Codex are starting to create a new challenge for enterprise security teams. Their automated actions…
A critical vulnerability in fast-mcp-telegram can let a remote attacker bypass bearer-token authentication and access a default Telegram account session without knowing the correct token.…
A persistent Windows device identifier helped federal investigators connect an alleged Scattered Spider member to a 2025 intrusion at a luxury jewelry retailer, according to…
BeyondTrust has patched four vulnerabilities in its Remote Support and Privileged Remote Access products, including two critical authentication bypass flaws that could let attackers gain…
A long-standing Linux KVM vulnerability can let a malicious guest virtual machine corrupt host kernel memory, breaking one of the core security promises of virtualization.…
A hidden authentication backdoor in several Tenda router firmware builds can let attackers bypass normal login checks and gain full administrator access to the device’s…
Iran-linked threat actor Cavern Manticore has been using trusted IT administration tools and DLL sideloading to deploy a modular command-and-control framework called Cavern against Israeli…
A vulnerability in the OpenAI Codex desktop app for macOS could allow attackers to leak sensitive data by abusing indirect prompt injection and automatic Markdown…
February 10, 2026
1 comment 
