Cybersecurity

AI can increase development output by 10 to 50 times, making security review the bottleneck.Traditional CVE-driven remediation may break down when software is built...

North Korea's Kimsuky hacking group is now running AI models offline on its own servers, moving beyond public chatbots to build AI into its...

Malicious VS Code extension "Solidity Pro" steals browser crypto wallets and credentials Captures seed phrases, GitHub tokens, AWS keys, OpenAI keys, and SSH private keys Uses...

PortSwigger researcher Gareth Heyes presented CSS-based email attacks at Black Hat USA 2026 on August 8.The attacks exploited HTML and CSS techniques in Outlook,...

ClickFix-style attacks are delivering Go-based malware on macOS that steals cryptocurrency wallet funds, browser passwords, and iCloud Keychain data.The malware includes a "DRAIN" routine...

CVE-2026-64564 (SCTPhantom) is a use-after-free bug in Linux's SCTP networking code that can escalate to full root access and container escape.The flaw has existed...

PortSwigger's AI system, HTTP Terminator, autonomously generated and validated novel HTTP desynchronization attacks after exploring 30,000 candidate vectors.The research identified roughly 700 vulnerable targets...

Cisco disclosed multiple critical vulnerabilities in Catalyst SD-WAN and IOS XE Software, discovered during internal security testing using frontier AI models.The flaws include improper...