Cybersecurity

Threat actors are distributing 13 malicious npm packages that deliver a new, lightweight JavaScript stealer named WeaselBiscuit.The malware shows functional overlaps with BeaverTail...

Researchers have uncovered a new Android malware called RatHat, linked to China-based threat actors, which uses AI to navigate compromised devices.RatHat spreads through targeted...

2✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.

A hacker hijacked an active AI coding-assistant session at a SaaS firm to deploy the self-spreading Shai-Hulud worm.The worm stole secrets and source code...

Threat intelligence feeds identify leaked credentials, but security teams often lack the capacity to validate if those credentials are exploitable in their unique...

Threat actors are actively exploiting CVE-2026-27540, a critical arbitrary file upload flaw in the WooCommerce Wholesale Lead Capture plugin with 6,000+ active installs.Wordfence has...

A skilled human attacker exploited a critical Marimo vulnerability (CVE-2026-39987) to pivot from a vulnerable notebook to an SSH bastion host in just...

A critical vulnerability in LiteSpeed Web Server Enterprise could allow low-privilege users to gain root access on shared-hosting servers.cPanel urged administrators to update to...