Trellix highlighted findings from its latest Trellix SecondSight Threat Hunting Report with implications for Indian organizations. Examining five critical campaigns observed between January and June ...

The research examines how building from source, enforcing provenance and applying layered security controls can significantly reduce exposure to open-source malware. What you'll discover Where malicio ...

Threat actors are exploiting CVE-2026-58138, a critical-severity remote code execution vulnerability in Orkes Conductor.

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Google says attackers are using AI agents to automate more stages of cyberattacks, including scanning and credential theft.

A June 2026 spear-phishing campaign against a European embassy located in Asia, attributed to Bitter APT, used a compromised diplomatic mailbox from an African country, Technology For SMEs | News ...

CyberPress weekly cybersecurity newsletter and cybersecurity bulletin covering the top 50 cyber security stories from September 7–12, 2026.

An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by ...

Thirteen npm packages deliver WeaselBiscuit, a JavaScript stealer that harvests Chrome extension storage across Windows, macOS, and Linux.

Ransomware developer sentenced to prison on Switzerland, Plugin4Shell attack targets AI coders, organizations warned of SAP flaw.

DarkSword, JSCeal, Axios, Bitter APT, and APT28 campaigns reveal evolving tactics targeting iPhones, Southeast Asia, software ...

By exploiting how AI coding agents retrieve and verify plugins, researchers were able to execute malicious code even when the agent was told to use a trusted, approved version.