IntroductionOn May 14, 2026, the Zscaler ThreatLabz team identified unusually high activity associated with the threat actor SmartApeSG to deploy malware. During our examination, we discovered ...

Three popular plugins served malicious JavaScript through a compromised CDN.

Varonis chained three bugs in Microsoft 365 Copilot Enterprise Search into a one-click data theft path that bypassed phishing filters and CSP protections.

This is probably the dictionary illustration for "deceptively simple." ...

Chrome's WebMCP guidance warns that AI agents can be manipulated through the tools they are built to trust.

Tenet Security researchers reveal how new “agentjacking” attacks could trick coding agents into executing arbitrary code ...

The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel ...

Iran launched multiple rocket and drone attacks in the Persian Gulf and the U.S. military carried out an attack on Iran’s Qeshm Island, officials said. Subscribe to read this story ad-free Get ...

The most influential factor in the tech market is pace. When a new technology appears, it inevitably kicks off a race to capture market share: OpenAI introduces ChatGPT into the world, and the Claudes ...

Russia used a powerful hypersonic missile to carry out a massive attack Sunday in Kyiv, which killed at least two people, Ukrainian President Volodymyr Zelenskyy said. The Oreshnik ballistic missile ...

Security researchers have developed a new image-based prompt injection attack that can manipulate how multimodal AI systems interpret user instructions without modifying the original text prompt, ...

AI agents are now being weaponized through prompt injection, exposing why model guardrails are not enough to protect enterprise data. Last week, researchers at Google and Forcepoint reported that ...