In today’s cybersecurity landscape, the gap between routine maintenance and a full-blown security incident is shrinking fast. Systems that once felt stable are now under constant strain as organizations roll out new AI features, automated workflows, and connected services. Each…
Cybersecurity researchers have uncovered a novel attack technique that abused indirect prompt injection to sidestep safeguards in Google Gemini, turning Google Calendar into an unexpected data-leak channel. According to findings shared by Miggo Security, attackers were able to sneak a…
Security researchers have uncovered a new tactic used by the JavaScript-based malware loader known as GootLoader, showing how threat actors are abusing broken ZIP archives to evade analysis and security tools. According to a recent report from Expel, attackers are…
Ukrainian and German investigators have uncovered the identities of two Ukrainian nationals believed to be involved with Black Basta, a ransomware-as-a-service operation linked to Russia. Authorities also announced that the group’s suspected leader, 35-year-old Russian citizen Oleg Evgenievich Nefedov, has…
Node.js maintainers have issued emergency updates to address a serious vulnerability that can cause production applications to crash unexpectedly, opening the door to denial-of-service (DoS) attacks across much of the Node.js ecosystem. According to the Node.js security team, the issue…
Microsoft has released its first Patch Tuesday updates for 2026, rolling out fixes for 114 security vulnerabilities across Windows and related products. One of the flaws, the company confirmed, is already being exploited in real-world attacks. Of the total issues…
A new 2026 web security study has found that third-party applications are accessing sensitive user data on a majority of major websites without a clear business reason. After analyzing 4,700 high-traffic sites, researchers discovered that 64% of third-party tools now…
Fortinet has released security updates to address a high-severity flaw in its FortiSIEM platform that could allow unauthenticated attackers to remotely execute code on affected systems. The vulnerability, tracked as CVE-2025-64155, carries a CVSS score of 9.4, placing it firmly…
Security researchers have uncovered an active malware campaign that is abusing a DLL side-loading weakness in a legitimate Windows executable linked to the open-source c-ares library. The technique allows attackers to quietly bypass security defenses and install a broad range…
AI agents have moved far beyond simple productivity tools. What started as personal assistants for coding, chat, or task automation are now shared, organization-wide systems embedded deep inside daily operations. Across security, IT, engineering, and business teams, these agents increasingly…
