Google Rushes Emergency Chrome Patch as Attackers Exploit V8 Zero-Day
Google has pushed an emergency Chrome update after confirming that a type confusion flaw in the V8 engine, tracked as CVE-2026-85046, is being actively exploited in the wild....
TP-Link Patches Archer AX55 Flaws Enabling Code Execution and Password Theft
TP-Link has fixed two Archer AX55 v4 vulnerabilities affecting EasyMesh and web login security. A local attacker could crash or potentially take over the router, while captured HTTP...
NodeStealer Adds Keylogging and Screenshots to Its Account-Theft Arsenal
A new NodeStealer variant adds continuous keylogging, clipboard monitoring and screenshots to its browser and Facebook data theft. Financial services were the most affected sector in recent activity...
Toy Ghouls Hide New Windows Backdoors Behind MQTT and Matrix Traffic
The Toy Ghouls group has deployed two custom Windows backdoors that use MQTT and Matrix-based services for command traffic. The malware adds durable remote control to compromises previously...
AI-Orchestrated Intrusions Hit Asian Government and Political Networks
Attackers used an AI-orchestration framework alongside conventional exploits, stolen credentials and custom malware in a campaign spanning Asian government, political and education targets. The case shows how agentic...
Leaked AWS Administrator Key Fuels Costly LLMjacking Through Bedrock and Marketplace
A leaked AWS IAM key with administrator privileges allowed an attacker to create a new identity, activate premium AI models and bill inference usage to the victim. The...
Rogue ScreenConnect Clients Turn Remote Support Sessions Into a Worm-Like Infection Chain
Attackers are abusing unauthorized ScreenConnect installations to push staged malware into newly connected Windows systems. The campaign begins with social engineering, then uses trusted remote-support functions for persistence,...
Inside ‘The Gentlemen’: The Ransomware Operation That Can Take Down a Network Before Lunch
A ransomware-as-a-service operation dubbed 'The Gentlemen' by researchers is compromising networks and detonating encryption in as little as 24 hours, methodically disabling backups and security tooling before attackers...