PowMix targets Czech workforce since Dec 2025 using jittered C2 and ZIP phishing, enabling stealthy remote access and ...

Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...

Cisco patches four CVEs up to CVSS 9.9 in ISE and Webex, preventing code execution and user impersonation risks.

The cloud-based Webex service has already been patched, but admins must replace an identity provider certificate in Webex ...

CERT-UA links the AgingFly credential-stealing campaign to phishing, browser theft, and modular remote access.

This week, a "Raccoon"-linked actor hit help desks, Eurail exposed 308K users, Fortinet patched critical flaws, Pushpaganda ...

The supply chain attack on third-party library Axios has forced OpenAI to revoke its code-signing certificate and require ...

Researchers demonstrate Claude AI building a Chrome exploit chain, raising alarm over what Anthropic’s Mythos could do next.

OpenAI Codex update introduces 90 plus plugins, memory, desktop control, and automation to improve developer workflows.

Hackers are exploiting a critical vulnerability in Marimo reactive Python notebook to deploy a new variant of NKAbuse malware ...

Across the April 8 and April 15, 2026 releases, Visual Studio Code expanded its agent-focused tooling with a new companion app, better terminal interaction, session debugging and more built-in Copilot ...

OpenAI's Codex desktop app now controls your Mac, runs its own browser, and generates images in a new update released today.