19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges

July 2, 2026 at 12:58AM A teenager accused of belonging to the hacking group Scattered Spider has been extradited from Finland to…

VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer

July 1, 2026 at 10:48PM Cybersecurity researchers have flagged a new multi-stage malware delivery attack chain that uses social e…

Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery

July 1, 2026 at 11:02AM ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office. New…

Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service

July 1, 2026 at 09:24AM Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC (formerly Citrix A…

RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS

June 30, 2026 at 11:15PM A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and…

Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth

June 30, 2026 at 01:08PM A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitra…

Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs

June 30, 2026 at 12:45PM Apple on Monday released security updates for iOS, macOS, and the Safari web browser to address over thr…

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

June 30, 2026 at 10:34AM A critical security flaw impacting Oracle E-Business Suite has come under active exploitation in the wil…

Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input

June 30, 2026 at 12:10AM Microsoft has found a malicious Chrome extension that posed as the AI search engine Perplexity and quiet…

Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse

June 29, 2026 at 05:10PM A Russian advanced persistent threat (APT) group has continued to evolve and expand its malware arsenal …

Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts

June 29, 2026 at 02:02PM Microsoft has shut down a long-running malicious extension operation on the Edge Add-ons store that hid …

Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw

June 29, 2026 at 12:36PM A public proof-of-concept is now out for CVE-2026-55200, a critical flaw in libssh2 that lets a maliciou…