GitLab has released urgent security updates to fix a critical vulnerability that could allow attackers to execute arbitrary ...

GlassWorm hides malware in VS Code theme extensions, targeting developers through Visual Studio Marketplace and Open VSX.

AdFection: Citizen Lab says Discover-Tech used targeted ads to deliver Candiru zero-click spyware to Al Jazeera devices.

Reflectiz's AI agent bypassed an insurer's live login by directing a one-time code to its own inbox during an authorized ...

Researchers say that mercenary hackers laced ads with zero-click exploits that installed sophisticated malware on the devices ...

In the previous article, "Implementation Vulnerabilities in x402 per-call APIs: 5 Attacks at the HTTP Layer Not Found in USDC ...

Security research team Noma Labs, part of Noma Security, the world's leading agentic security solution, today released details of SneakPeek, an exploit chain discovered in Anthropic's Claude Code ...

Online advertising campaigns infected devices at Al Jazeera with Candiru spyware without requiring targets to click anything.

Researchers disclosed Branch Target Reuse (BTR), an attack that exploits stale branch predictions left in the CPU after JIT code is reused. This article examines the Linux root-hash experiment, what ...

Cloudflare's client-side security research team disclosed yesterday that four active malicious JavaScript campaigns targeting online storefronts have been operating in the open, with seven of eight ...

Since September 2026, companies have been announcing unauthorized access and personal information leaks one after another.