PhantomCore exploited three TrueConf flaws since September 2025, enabling remote access and lateral movement across Russian ...
NomShub, a vulnerability chain in Cursor AI, allowed attackers to achieve persistent access to systems via indirect prompt ...
A threat group tracked as UNC6692 uses social engineering to deploy a new, custom malware suite named 'Snow' which includes a ...
PHANTOMPULSE spreads via Obsidian plugin abuse in REF6598 campaign, targeting finance and crypto users, bypassing AV controls ...
A prompt injection flaw in Google’s Antigravity IDE turns a file search tool into a remote code execution vector, bypassing ...
Attackers exploit Microsoft Teams and Snow malware to steal credentials and take over enterprise networks through social ...
A new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability ...
North Korea's Sapphire Sleet uses fake job offers and phony Zoom updates to deliver ClickFix attacks that steal credentials ...
Researchers say a prompt injection bug in Google's Antigravity AI coding tool could have let attackers run commands, despite ...
NSW Police says an investigation is underway after fuel was reported stolen following a fail-to-pay incident at a service ...
The prompt-injection issue in the agentic AI product for filesystem operations was a sanitization issue that allowed for ...
A single unauthenticated connection gives attackers a full shell; credential theft observed in under three minutes on honeypot servers.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results