Five malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in a supply-chain attack that delivered a remote access trojan with info-stealing capabilities. […]
OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps
A malware framework called OkoBot has been running on Windows machines since April 2025, and one of its modules is built to con hardware wallet owners out of their recovery phrase.
On an infected PC, the request comes from inside the wallet’s own desktop software. Sometimes it waits until you plug the device in first. The page is malicious. The app around it is the real one you installed, and
Unpatched Cursor Vulnerability Exposes Users to Code Execution
An attacker can create a malicious repository containing a git.exe in the project root, and Cursor executes it automatically.
The post Unpatched Cursor Vulnerability Exposes Users to Code Execution appeared first on SecurityWeek.
CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities
Three vulnerabilities are actively exploited in attacks, including two that have been targeted as zero-days.
The post CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities appeared first on SecurityWeek.
We built a vulnerability vending machine: AI tokens in, zero-days out
Intruder built an AI-powered “vulnerability vending machine” that combines code slicing with LLMs to automatically discover complex software vulnerabilities. The company explains how the system found and exploited a previously unknown WordPress plugin zero-day, with additional discoveries already under responsible disclosure. […]
Firefox, Chrome, Adobe, and VMware Updates Fix Multiple Critical Security Flaws
Mozilla has released updates to address two critical flaws in Firefox for which it warned that exploit code has been published.
The vulnerabilities are listed below –
CVE-2026-15718, an invalid pointer in the JavaScript: WebAssembly component
CVE-2026-15719, a site isolation in the DOM: Navigation component
“We are aware that exploit code for this is public, however we are not aware of
Windows Bind Link Attacks Can Hide Malware From EDR Tools
Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint security products.
The post Windows Bind Link Attacks Can Hide Malware From EDR Tools appeared first on SecurityWeek.
Virtual Event Today: Cloud & Data Security Summit
Attendees will be able to interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.
The post Virtual Event Today: Cloud & Data Security Summit appeared first on SecurityWeek.
CISA and Partners Publish Guidance to Help Software Manufacturers and Online Service Providers Work With Security Researchers
US Charges Russian Individuals and Firms for Running Cybercrime Services
The suspects and their companies were previously sanctioned by the United States and its allies.
The post US Charges Russian Individuals and Firms for Running Cybercrime Services appeared first on SecurityWeek.