- VS Code Delays Extension Updates to Block Supply Chain Attacks
Microsoft adds a two-hour delay to VS Code extension auto-updates to combat supply chain attacks. Learn how this protects developers and why it matters for security.
- 20,000 Instagram Accounts Stolen in Meta AI Support Hack
Meta confirms over 20,000 Instagram accounts were hijacked through a flaw in its AI-powered support system. Learn how it happened and how to protect your business accounts now.
- AI-Powered Windows Terminal: Hands-On Review
Microsoft’s open-source Intelligent Terminal brings AI directly into Windows Terminal without disrupting your regular sessions. This hands-on review covers setup, performance, and key features for developers and sysadmins.
- C0XMO Botnet Hits DD-WRT Routers, Wipes Out Rival Malware
C0XMO, a new Gafgyt botnet variant, targets DD-WRT routers and spreads to other devices. It actively kills rival malware, making it a serious threat to home networks.
- Fake IT Calls: Silent Ransom Group Hits Law Firms
The Silent Ransom Group is targeting U.S. law firms with fake IT support calls, stealing data within hours. Learn how they operate and protect your firm.
- Everest Forms Pro Hack: Take Over WordPress Sites Now
Hackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin, letting them take full control of WordPress sites. Learn how to protect your site now with our actionable guide.
- ChatGPT Lockdown Mode Blocks Data Theft Tools
OpenAI's new ChatGPT Lockdown Mode stops prompt injection attacks from leaking your data. Available on Free, Go, Plus, and Pro plans. Learn how it works and why it matters for security-conscious users.
- Free Apps Turn Smart TVs Into Proxy Nodes for AI Scraping
A researcher reverse-engineered Bright Data's iOS SDK, finding it can turn smart TVs into proxy nodes for web scraping. The company, successor to Luminati, runs the largest residential proxy network, heavily marketed to AI. Users unknowingly provide bandwidth.
- CISA Flags SolarWinds Serv-U DoS Bug as Actively Exploited
CISA adds actively exploited SolarWinds Serv-U DoS flaw (CVE-2026-28318, CVSS 7.5) to KEV catalog. Learn what this means and how to protect your systems.
- AI Agent Finds 21 Zero-Days in FFmpeg; Chrome Hits Record 429 Patches
Two things landed within days of each other this week. A security startup reported 21 previously unknown vulnerabilities in FFmpeg, found by an AI agent. Google shipped Chrome 149 with patches for 429 security bugs, the most ever. Only the FFmpeg bugs were found by AI.
- 73 Microsoft GitHub Repos Hit by Miasma Supply Chain Attack
Microsoft's GitHub repositories were hit by the Miasma self-replicating worm, affecting 73 repos across Azure, Microsoft, and more. Learn how this supply chain attack works and what it means for developers.
- Cisco SD-WAN Flaw Exploited: No Patch Available Yet
Cisco's Catalyst SD-WAN Manager has a high-severity flaw under active exploitation. No patch exists yet. Learn which deployments are at risk and what you can do to protect your network now.
- Polyfill Login Scams Hit Toshiba and Muji Websites
Fake login prompts on Toshiba and Muji websites are stealing credentials via polyfill attacks. Learn how to spot and avoid this phishing threat.
- CISA Warns: Hackers Exploit SolarWinds Serv-U Flaw Now
CISA warns hackers are actively exploiting a high-severity SolarWinds Serv-U flaw to crash servers. Patch now to protect your infrastructure. No authentication required.
- New Chinese Malware Targets Microsoft 365 Networks
A Chinese espionage group is using new malware to break into Microsoft 365 networks. Learn how they operate and what you can do to protect your business from these advanced threats.
- npm Supply Chain Attacks Unleash Rust Stealer and Self-Spreading Worm
Multiple software supply chain attacks have hit the npm ecosystem, with threat actors using malicious and poisoned packages to distribute a Rust-based information stealer and a self-spreading worm, hiding behind an eBPF kernel rootkit.
- Dark Web Drug Dealer Gets 26 Years for Fentanyl Trafficking
A California man got 26 years in federal prison for selling fentanyl and meth on the dark web marketplace Nemesis Market. This case shows how law enforcement is cracking down on online drug trafficking.
- Android Spyware Asin Hunts Arabic Users via Fake Apps
A new Android spyware called Asin is targeting Arabic-speaking users through fake news, PDF, and war map apps. ESET discovered the malware spreading via multiple campaigns in early 2025. Learn how to protect yourself from this stealthy threat.
- 900 Gas Station Tank Systems Exposed to Hacker Attacks
Over 900 automatic tank gauge systems across US gas stations, airports, and military bases are exposed online and vulnerable to ongoing hacker attacks, posing serious risks to fuel infrastructure.
- Chinese Hackers Target Microsoft IIS Servers with Custom Web Shell
Security researchers uncover OP-512, a Chinese-linked threat group targeting Microsoft IIS servers with custom web shells for espionage. Learn how to protect your organization.