More Than 45,000 Software Flaws Reported as AI Reshapes Cybersecurity
The number of software vulnerabilities being uncovered in 2026 is on pace to roughly double the total recorded in 2025,...
uncovered
Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files
Cybersecurity researchers have uncovered a sandbox escape vulnerability in Anthropic's Claude Cowork that makes it possible to break out of...
Jalisco, OmegaLord Phishing Kits Target Microsoft 365 Accounts
New phishing kits beat Microsoft’s MFA at its own game. Researchers at cybersecurity company ReliaQuest have uncovered two phishing toolkits,...
Microsoft Warns: Fake Perplexity Extension Abused Chrome Search Features
Your Chrome searches may not have been going where you thought. Microsoft has uncovered a malicious Chrome extension masquerading as...
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a...
Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability
An analysis of a popular Google Chrome ad block extension for YouTube has uncovered the ability to execute arbitrary JavaScript...
105K Chrome Installs Linked to Adware and Fake Google Traffic
Security researchers have uncovered a network of 152 Google Chrome extensions posing as live wallpaper and new-tab customization tools that...
Operation NoVoice: Android Malware Found in 50+ Apps Can Hijack Devices
McAfee’s mobile research team has uncovered a large-scale Android malware campaign we’re tracking as Operation NoVoice. The campaign was distributed through more than 50 apps...
Ghost Campaign Uses 7 npm Packages to Steal Crypto Wallets and Credentials
Cybersecurity researchers have uncovered a new set of malicious npm packages that are designed to steal cryptocurrency wallets and sensitive...
Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper
Ravie LakshmananMar 23, 2026Cloud Security / DevOps Cybersecurity researchers have uncovered malicious artifacts distributed via Docker Hub following the Trivy...
New Research: Hackers Are Using AI-Written Code to Spread Malware
McAfee Labs has uncovered a widespread malware campaign hiding inside fake downloads for things like game mods, AI tools, drivers,...
PromptSpy ushers in the era of Android threats using GenAI
ESET researchers uncovered the first known case of Android malware abusing generative AI for context-aware user interface manipulation. While machine...
Love? Actually: Fake dating app used as lure in targeted spyware campaign in Pakistan
ESET researchers have uncovered an Android spyware campaign leveraging romance scam tactics to target individuals in Pakistan. The campaign uses...
Chainlit AI Framework Flaws Enable Data Theft via File Read and SSRF Bugs
Ravie LakshmananJan 21, 2026Vulnerability / Artificial Intelligence Security vulnerabilities were uncovered in the popular open-source artificial intelligence (AI) framework Chainlit...
Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading
Ravie LakshmananJan 20, 2026Malware / Threat Intelligence Cybersecurity researchers have uncovered a new phishing campaign that exploits social media private...
