Security researchers at Censys have uncovered an active campaign that targets internet‑exposed ComfyUI instances to build a cryptomining and proxy...
Researchers at the University of Toronto disclosed a new and worrying attack against modern GPUs. They call it GPUBreach. The...
On March 24, 2026, one of the most widely used AI gateway libraries got hit by a supply chain attack....
A China-linked cybercriminal group known as Storm-1175 has been exploiting a mix of zero-day and n-day vulnerabilities to mount fast,...
Attackers are actively exploiting a maximum severity vulnerability in Flowise, the open-source AI agent builder, VulnCheck said. The flaw is...
An Iran-linked threat actor carried out a large password-spraying campaign against Microsoft 365 environments in Israel and the United Arab...
Drift says the April 1 theft of $285 million was no smash-and-grab. It was the endgame of months of careful...
Apple has widened access to a security update to protect older iPhones and iPads from an actively used exploit kit...
This week was quiet in volume. It was loud in consequence. Long campaigns, old techniques, and renewed proof-of-concept research all...
A new malware campaign is tricking users and stealing browser credentials, ReliaQuest said. The campaign uses ClickFix social engineering to...