Researchers have documented the inaugural instance of a deleterious Microsoft Outlook extension proliferating through the official Office Add-in Store. The focal point of this incursion is AgreeTo, a legacy scheduling utility. While the original...
The OpenClaw project—a personal AI interlocutor with whom users engage via messaging platforms and to whom they frequently entrust access to online services—has, within a mere fortnight, mutated into a fountainhead of systemic distress....
For nearly half a year, the ubiquitous text editor Notepad++ inadvertently disseminated malicious payloads rather than legitimate refinements. This incursion remained veiled from June through December 2025, subverting the update mechanism of a utility...
The lead developer of the ubiquitous text editor Notepad++ has disclosed a formidable security breach that compromised the application’s update mechanism. State-sponsored adversaries successfully intercepted the update verification process, clandestinely rerouting users toward malicious...
Fabricated notifications impersonating the Income Tax Department of India have emerged as the facade for a sophisticated malware campaign, culminating in the deployment of the Blackmoon banking trojan. This offensive specifically targets the Indian...
A Jordanian national residing in Georgia has formally confessed to his involvement in the illicit trade of unauthorized access to corporate networks. According to American law enforcement, the individual functioned as a clandestine intermediary,...
The Amsterdam Court of Appeal has sentenced a 44-year-old Dutch national to seven years of imprisonment for a series of transgressions involving sophisticated cyber offensives and narcotics trafficking. The convictions pertain to the infiltration...
IBM has inaugurated a closed beta for its proprietary autonomous development agent, engineered to facilitate code composition while adhering to rigorous corporate security mandates. In the firm’s promotional literature, the agent is depicted as...
A security researcher has demonstrated an unconventional scenario in which the popular dating app Hinge can be repurposed into an improvised command-and-control server—an infrastructure through which attackers could issue commands to malware and exfiltrate...
A detailed technical analysis of the malware known as VVS Stealer, also referred to as VVS $tealer, has surfaced online. This data-stealing tool is written in Python and primarily targets Discord users. It siphons...
Popular IDEs with AI assistants—such as Cursor, Windsurf, Google Antigravity, and Trae—have been found vulnerable to a supply-chain attack. These environments prompt users to install extensions that are absent from the OpenVSX catalog. The...
The hacking group known as Transparent Tribe has launched a new wave of cyber-espionage operations targeting government bodies, research institutions, and strategically important organizations in India. The attackers’ primary weapon is yet another variant...
