A new variant of the 'SHub' macOS infostealer uses AppleScript to show a fake security update message and installs a backdoor. [...]
Supply chain attackers are not only trying to slip malicious code into trusted software. They are trying to steal the access that makes trusted software possible. Recently, three separate...
Ivanti, Fortinet, n8n, SAP, and VMware have released security fixes for various vulnerabilities that could be exploited by bad actors to bypass authentication and execute arbitrary code. Topping...
Multiple vulnerabilities have been discovered in NGINX, the most severe of which could allow for remote code execution. NGINX is a software used for web serving, reverse proxying, caching, and...
Shai-Hulud worm exploited GitHub Actions misconfiguration to poison shared cache, now project weighing nuclear option on unsolicited contributions
Executive Summary The Gentlemen is an active ransomware and extortion operation that emerged publicly in the second half of 2025 and rapidly scaled into a high-volume threat actor. Rather than a...
Researchers say 18-year-old flaw already being probed and exploited just days after disclosure
Many employees already use shadow AI tools at work without security review. Adaptive Security breaks down how teams can build practical AI governance without adding friction for employees. [...]
Cybersecurity researchers have discovered four new npm packages containing information-stealing malware, one of which is a clone of the Shai-Hulud worm open-sourced by TeamPCP. The list of...
The clock is ticking on Q-Day, the looming yet unknown date when quantum computing will have the capacity to quickly and easily break the encryption keys that keep most internet communication...
Unlike most cyber security regulations, the EU’s Cyber Resilience Act is about product safety rather than processes or certification, extending the CE mark from the physical side of products to...
Shift comes amid mounting reports of successful social engineering attacks targeting higher-ups in government
Medical professionals are pushing back against artificial intelligence assuming the persona of a doctor, arguing it amounts to practicing without a license. One solution floated in the Journal of...
Under the Defense Department’s nearly $1.5 trillion fiscal 2027 budget request, the Army would have almost $1 billion in procurement funding to spend on small counter unmanned aerial system...
Europe is pouring more than €2 billion into sovereign cloud initiatives designed to reduce exposure to US legal reach. The EU’s IPCEI-CIS program funds infrastructure development. France qualifies...
Over the past few months, the headlines might give the impression that the U.S. court system is deftly navigating the world of tech regulation. A federal judge quickly enjoined the Department of...
Pope Leo XIV has approved the creation of a new Vatican commission on artificial intelligence to coordinate the Holy See’s response to the rapidly expanding technology and its implications for...
The UK’s financial services firms must take active steps to manage the cybersecurity risks stemming from frontier AI, the UK government, the UK’s Financial Conduct Authority (FCA) and Bank of...
The Shai-Hulud malware leaked last week is now used in new attacks on the Node Package Manager (npm) index, as infected packages emerged over the weekend. [...]
The civic uproar began quietly, when a mom walking her newborn spotted a strange black contraption at the end of her block: a camera topped with a solar panel. Dierdre Shea researched the camera...
Students at one of Russia’s leading engineering universities are getting a lucrative offer: ditch their studies for a year, fly drones for the military and earn more than 5 million rubles...
Russia-linked APT group Turla upgraded its Kazuar backdoor into a modular peer-to-peer botnet designed for stealth and persistent access to infected systems. Microsoft researchers say the malware...
U.S. President Donald Trump is visiting Beijing this week to meet with Chinese President Xi Jinping for the first time in nearly a decade. Since Trump returned to office in 2025, several U.S....
In future wars, machines will go first. Humans will follow. Today, China’s military is developing attritable robotic systems as part of a broader shift in how it plans to fight. That includes...
SHub Reaper bypasses Apple's Terminal mitigation, steals credentials and documents, and plants a persistent backdoor for continued access after infection.
Cryptocurrency platform THORChain said more than $10 million was stolen during a security incident on Friday morning. The cyberattack was first identified by blockchain security firm Peckshield...
Researchers have confirmed that a remarkable piece of malware discovered years ago but analyzed only recently was designed to subvert nuclear weapons testing simulations with the aim of...
MoD says StormBreaker will plug gap until homegrown SPEAR 3 integration lands
A sophisticated cyber espionage campaign targeting multiple Malaysian organizations has been uncovered, revealing a highly structured attack chain that blends custom tooling, cloud infrastructure,...
A number of Americans who are in the Democratic Republic of the Congo are believed to have had exposure to suspected cases in the country’s latest Ebola outbreak, with several deemed to have had...