CastleRAT and CastleLoader, active since March 2025, spread malware via phishing and GitHub repos, enabling data theft.

Ethereum smart contracts are being used to download malware via poisoned NPM packages, something Binance has linked to DPRK ...

Hackers are increasingly using a new AI-powered offensive security framework called HexStrike-AI in real attacks to exploit ...

CISA warned that a critical vulnerability (CVE-2020-24363) in TP-Link TL-WA855RE Wi-Fi range extenders is being exploited in attacks.