Cybersecurity

Threat actor TeamPCP has distributed malicious versions of the Trivy vulnerability scanner on Docker Hub, with versions 0.69.4, 0.69.5, and 0.69.6 containing an infostealer.The...

Hackers linked to the TeamPCP operation have unleashed a self-propagating malware worm called CanisterWorm across numerous npm packages.The worm uses an ICP canister on...

The U.S. CISA has added five actively exploited security flaws impacting Apple, Craft CMS, and Laravel Livewire to its catalog, requiring federal agencies to...

Apple is urging users of outdated iOS versions to update their iPhones immediately to protect against powerful web-based exploit kits, Coruna and DarkSword.These attacks,...

A new Android malware called Perseus is actively targeting cryptocurrency and banking users through dropper apps distributed via phishing sites.The malware, derived from Cerberus...

Apple released its first Background Security Improvements to patch a cross-origin vulnerability in WebKit.The flaw, CVE-2026-20643, could bypass the same-origin policy on iOS, iPadOS,...

Two-thirds of security leaders lack visibility into how AI is used within their organizations, with none claiming full oversight.A lack of internal expertise is...

Konni attacks use phishing disguised as official notices to steal credentials.Threat actors hijack victims' KakaoTalk desktop apps to spread malware to contacts.The campaign uses...