The Underminr vulnerability allows attackers to hide malicious connections behind trusted domains, potentially affecting 88 million domains worldwide.
The popular CPUID hardware utility website was breached and manipulated to serve malicious versions of CPU-Z, HWMonitor, and PerfMonitor, deploying a newly identified RAT capable of stealing credentials and cryptocurrency wallets.
A fraudulent website impersonating Anthropic's Claude AI platform was found distributing PlugX, a remote access trojan with deep ties to espionage operations, through a cleverly staged installer chain.
Google has made Gmail end-to-end encryption available on Android and iOS for enterprise users, allowing encrypted messages to be composed and read natively in the mobile app. The feature is powered by client-side encryption and is available now for eligible Google Workspace plans.
A critical pre-authentication remote code execution vulnerability in the Marimo Python notebook platform was actively exploited within 10 hours of public disclosure, with attackers targeting cloud credentials and SSH keys.
Adobe has released out-of-band patches for a critical zero-day vulnerability in Acrobat and Reader, tracked as CVE-2026-34621 with a CVSS score of 9.6, which attackers have been exploiting since at least November 2025.
A multinational law enforcement operation led by the UK's National Crime Agency has identified over 20,000 cryptocurrency fraud victims in Canada, the UK, and the United States, freezing more than $12 million in suspected criminal proceeds.
Two malicious versions of Axios, the most downloaded JavaScript HTTP client library, were briefly published to NPM and contained a cross-platform RAT. Google has attributed the attack to suspected North Korean threat actor UNC1069.
Forgotten laptops issued to contractors and former employees represent a growing and underappreciated attack surface, combining credential exposure, lateral movement risk, and compliance failures into one persistent blind spot.
Government agencies across Latin America are being hammered by cyberattacks at a rate far exceeding the global average, with incidents striking Colombia's health ministry, Puerto Rico's transport department, and Mexico's government systems.