A new class of AI security vulnerability is redefining how attackers compromise development pipelines. Dubbed “Comment … GitHub AI Agents Hit by Prompt Injection via CommentsRead more
Axios npm Supply Chain Attack Impacts Developers
A major software supply chain attack has struck the JavaScript ecosystem, prompting an urgent alert from … Axios npm Supply Chain Attack Impacts DevelopersRead more
GGUF Model Flaw Enables RCE on SGLang AI Servers
Artificial intelligence infrastructure is becoming a new high-value target for attackers. A critical vulnerability tracked as … GGUF Model Flaw Enables RCE on SGLang AI ServersRead more
StealTok Campaign Turns TikTok Extensions into Spyware
Browser extensions are often trusted by default—but that trust is exactly what attackers are now exploiting. … StealTok Campaign Turns TikTok Extensions into SpywareRead more
AI-Powered Exploits Are Collapsing the Patch Window
Cybersecurity has always been a race between discovery and exploitation. But that race is changing shape. … AI-Powered Exploits Are Collapsing the Patch WindowRead more
FortiGate VPN Breach Triggers Nightmare-Eclipse Tool Attacks
A new real-world intrusion campaign is raising alarms across enterprise security teams. Attackers are reportedly leveraging … FortiGate VPN Breach Triggers Nightmare-Eclipse Tool AttacksRead more
Apache ActiveMQ Vulnerability Exposes 6,000+ Servers
A newly disclosed vulnerability in Apache ActiveMQ is quickly becoming a major concern for security teams … Apache ActiveMQ Vulnerability Exposes 6,000+ ServersRead more
Gh0st RAT & CloverPlus Adware: Dual Malware Campaign Explained
Modern cyberattacks are no longer single-purpose—they’re multi-layered, profit-driven operations. A newly discovered campaign is delivering two … Gh0st RAT & CloverPlus Adware: Dual Malware Campaign ExplainedRead more
AppDomain Hijacking Attack Turns Intel Tool Into Malware Loader
What if your most trusted software became your biggest security risk? A newly uncovered campaign known … AppDomain Hijacking Attack Turns Intel Tool Into Malware LoaderRead more
Anthropic MCP Vulnerability Enables Critical RCE Attacks
AI security is entering a new—and dangerous—phase. A critical vulnerability in Anthropic’s Model Context Protocol (MCP) … Anthropic MCP Vulnerability Enables Critical RCE AttacksRead more