Browsing: News

Google Fixes Two Chrome Zero-Days Exploited in the Wild Affecting Skia and V8 Google has released an emergency update to…

GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos The persistent GlassWorm supply chain threat actor has…

Virtualization Infrastructure Protections  Threat actors often target virtualization infrastructure (e.g., VMware vSphere, Microsoft Hyper-V) as part of their reconnaissance, lateral…

Microsoft Azure Monitor alerts are being abused to send callback phishing emails that impersonate warnings from the Microsoft Security Team…

In 2025, the Center for Internet Security (CIS) faced one of the most significant tests in our history. Threats across…

Welcome back to the Abstract! Here are the studies this week that visited strange new worlds, broke the adorability scale,…

VulnCheck identifies exploited vulnerabilities 28.13 days faster than CISA KEV on averageOf 376 CVEs in both catalogs during 2024-2025, VulnCheck…

LeakNet Ransomware Uses ClickFix and Deno Runtime for Stealthy Attacks ReliaQuest researchers have documented a significant tactical evolution by the…

Global organizations still struggle with basic ground truth on vulnerabilities and risk. Vulnerability and exploit information, on the whole, is…

The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed credential-stealing malware…