A malware campaign using the EtherHiding technique has exploited the Polygon blockchain to conceal and dynamically rotate command-and-control infrastructure while stealing banking and cryptocurrency ...

Hackers use compromised websites and blockchain-based servers to steal bank logins and 2FA codes through malicious PowerShell ...

Two OpenAI Codex sandbox flaws, Overpatch and Heapjack, could let malicious repositories execute commands on developer systems.

Browser AI agent security research: security researcher Gal Weizman of Forever Security demonstrated that one ordinary browser extension can hijack AI agents in Chrome, Edge, Perplexity Comet, Opera ...

Brevo supply chain breach spreads WordPress backdoors and ClickFix malware to over 100,000 websites. Discover how to protect ...

Orkes Conductor CVE-2026-58138 is under active attack. Patch to 3.30.2 or later, isolate workflow APIs, hunt command ...

A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The ...

Threat actors are exploiting CVE-2026-58138, a critical-severity remote code execution vulnerability in Orkes Conductor.

Thales, a global leader in advanced technologies across Defence, Aerospace, and Cyber & Digital, has announced the launch of HexaForce, its next-generation AI-enhanced multi-domain command and control ...

The campaign reportedly targeted visitors through Brevo’s embedded tracker, chat widget, hosted forms, and unsubscribe pages.