Critical CVEs
RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims Swati KhandelwalSep 28, 2026Mobile Security / Artificial Intelligence RatHat's operators build and…
APT
breach
exploit
malware
September 28, 2026
Critical CVEs
IAM for AI agents: A Practical Enterprise Framework The Hacker NewsSep 28, 2026AI Agent Security / Enterprise Security What is IAM for…
APT
breach
exploit
Ransomware
September 28, 2026
Critical CVEs
Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent Ravie LakshmananSep 28, 2026Malware / Cloud Security Cybersecurity researchers have disclosed…
APT
breach
Cloud Security
exploit
September 28, 2026
Critical CVEs
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials Ravie LakshmananSep 26, 2026Malware / Endpoint Security The Psychedelic…
APT
breach
CVE-2023-20598
EDR
September 26, 2026
Critical CVEs
PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence Ravie LakshmananSep 25, 2026Malware / Social Engineering Cybersecurity researchers have flagged…
APT
breach
exploit
malware
September 25, 2026
Critical CVEs
The SOC Doesn't Need to Start Over with Every Alert The Hacker NewsSep 25, 2026Artificial Intelligence / Security Operations Security leaders keep…
APT
EDR
exploit
malware
September 25, 2026
Critical CVEs
ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories Ravie LakshmananSep 24, 2026Hacking News /…
APT
CVE-2023-38831
CVE-2024-21412
EDR
September 24, 2026
Critical CVEs
Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content Ravie LakshmananSep 24, 2026Phishing / Malware The "third-party[.]com" domain, commonly used as…
APT
breach
exploit
malware
September 24, 2026
Critical CVEs
Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer Ravie LakshmananSep 24, 2026Malware / Social Engineering An active ClickFix campaign…
APT
breach
exploit
malware
September 24, 2026
Critical CVEs
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry Ravie LakshmananSep 23, 2026Malware / Supply Chain Cybersecurity researchers have…
APT
breach
exploit
malware
September 23, 2026