Splunk for Windows has a high-severity flaw that lets local users escalate privileges through misconfigured file permissions.

Researchers detail JS#SMUGGLER, a multi-stage web attack using JavaScript, HTA, and PowerShell to deploy NetSupport RAT on ...

Malicious CGTrader .blend files abuse Blender Auto Run to install StealC V2, raiding browsers, plugins, and crypto wallets.

Over 77,000 Internet-exposed IP addresses are vulnerable to the critical React2Shell remote code execution flaw (CVE-2025-55182), with researchers now confirming that attackers have already ...

Water Saci has upgraded its self-propagating malware to compromise banks and crypto exchanges by targeting enterprise users ...

Build workflows with Deep Agents CLI, file access, memory, planning, and shell tools using LangChain plus LangGraph in an open source stack.

The actor behind the "Contagious Interview" campaign has refined its tactics and social engineering scams to wrest ...

MuddyWater targets critical infrastructure in Israel and Egypt, relying on custom malware, improved tactics, and a predictable playbook.

Microsoft has silently mitigated CVE-2025-9491, a Windows vulnerability exploited to distribute malware via LNK files ...

A third-party patch management company is cutting short attackers’ use of LNK files to smuggle in malicious commands, while ...

The new feature allows users to utilise Meta AI to instantly translate the audio in a Reel into five new Indian languages – ...

This blog is intended to share an in-depth analysis of a recent multi-stage attack attributed to the Water Gamayun advanced persistent threat group (APT). Drawing on telemetry, forensic reconstruction ...