New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens 
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT 
OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests 
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code 
NSAuditor AI Enterprise 0.32.4: Closing Three RDS Blind Spots — Cleartext Proxy Connections, Backups That Outlive Their Database, and One Coherent Aurora Verdict 
GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal Repos
GitHub is investigating a significant security incident in which a threat actor — identified as TeamPCP — claimed responsibility for...
Microsoft Takes Down Malware-Signing Service Behind Ransomware Attacks
What's new: Microsoft has disrupted a malware-signing-as-a-service (MSaaS) operation known as Fox Tempest, which exploited the company's Artifact Signing system...
Urgent Security Alert: Microsoft Exchange Server Zero-Day CVE-2026-42897 Actively Exploited—Immediate Patching Required
Microsoft Exchange Server Zero-Day Vulnerability Discovered In a significant security alert, cybersecurity experts have identified a zero-day vulnerability in Microsoft...
“NSAuditor AI EE 0.7.2 Strengthens GCP IAM Security with Advanced Features and SDK Improvements”
NSAuditor AI EE 0.7.2 Enhances GCP IAM Auditing Capabilities In a significant update that bolsters the security of Google Cloud...
Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development
What's new: Microsoft has open-sourced two tools, RAMPART and Clarity, aimed at enhancing the security testing of AI agents during...