Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks

September 29, 2026 at 12:05AM Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they…

RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims

September 28, 2026 at 11:08PM RatHat's operators build and publish the Android banking trojan and control infected phones fro…

Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent

September 28, 2026 at 05:16PM Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that'…

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

September 28, 2026 at 12:51PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citri…

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

September 27, 2026 at 01:17PM Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances…

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

September 26, 2026 at 11:52PM The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style…

Zero Trust for AI Agents Starts With Fixing Zero Visibility

September 26, 2026 at 04:00PM The way we talk about AI agents is shifting, and the way we implement them requires an even more fu…

Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack

September 26, 2026 at 01:18PM Kiteworks (formerly Accellion) is urging customers to shut down their systems as a precautionary me…

WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

September 25, 2026 at 10:16AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical s…

ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories

September 24, 2026 at 11:22PM This week, the dangerous stuff keeps arriving dressed as something boring. An update. A login box. …

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

September 24, 2026 at 11:06AM Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of …

Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

September 23, 2026 at 11:36PM Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Te…