Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection and Data Theft
Two Google Chrome extensions have turned malicious after what appears to be a case of ownership transfer, offering attackers a…
Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure
î „Ravie Lakshmananî ‚Mar 09, 2026Threat Intelligence / Web Security High-value organizations located in South, Southeast, and East Asia have been targeted…
OpenAI Codex Security Scanned 1.2 Million Commits and Found 10,561 High-Severity Issues
î „Ravie Lakshmananî ‚Mar 07, 2026DevSecOps / Artificial Intelligence OpenAI on Friday began rolling out Codex Security, an artificial intelligence (AI)-powered security…
Anthropic Finds 22 Firefox Vulnerabilities Using Claude Opus 4.6 AI Model
î „Ravie Lakshmananî ‚Mar 07, 2026Browser Security / Artificial Intelligence Anthropic on Friday said it discovered 22 new security vulnerabilities in the…
Multi-Stage VOID#GEIST Malware Delivering XWorm, AsyncRAT, and Xeno RAT
Cybersecurity researchers have disclosed details of a multi-stage malware campaign that uses batch scripts as a pathway to deliver various…
Transparent Tribe Uses AI to Mass-Produce Malware Implants in Campaign Targeting India
î „Ravie Lakshmananî ‚Mar 06, 2026Threat Intelligence / Cyber Espionage The Pakistan-aligned threat actor known as Transparent Tribe has become the latest…
Hikvision and Rockwell Automation CVSS 9.8 Flaws Added to CISA KEV Catalog
î „Ravie Lakshmananî ‚Mar 06, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security…
Microsoft Reveals ClickFix Campaign Using Windows Terminal to Deploy Lumma Stealer
î „Ravie Lakshmananî ‚Mar 06, 2026Endpoint Security / Browser Security Microsoft on Thursday disclosed details of a new widespread ClickFix social engineering…
Iran-Linked MuddyWater Hackers Target U.S. Networks With New Dindoor Backdoor
New research from Broadcom’s Symantec and Carbon Black Threat Hunter Team has discovered evidence of an Iranian hacking group embedding…
The MSP Guide to Using AI-Powered Risk Management to Scale Cybersecurity
î „The Hacker Newsî ‚Mar 06, 2026Artificial Intelligence / Enterprise Security Scaling cybersecurity services as an MSP or MSSP requires technical expertise…