News that matters, without the noise.

Hackers Infect npm Package dbmux With Malware to Fully Compromise Developer Systems

A malicious package targeting software developers has been discovered on npm, one of the most widely used package

OpenClaw AI Agent Leaks Sensitive Credentials in New Phishing Attack Simulation

AI agents are becoming a core part of how companies manage their inboxes, triaging messages, pulling up files,

Nightmare-Eclipse Drops Yet Another Microsoft Exploit, RoguePlanet

The disgruntled researcher released yet another PoC for a Windows Defender bug that allows for system takeover, showing

The Invisible Battlefield: How Cyber War Is Reshaping Everyday Life

Former National Cyber Director Chris Inglis warns that cyber attacks threaten hospitals, utilities and essential services.

China-linked JDY botnet expands targeting of U.S. military networks

The JDY botnet, a malware network previously associated with Chinese threat actors like Volt Typhoon, has significantly expanded

Cyberattack shuts down major Australian sugar mills, disrupting harvest

Australia’s second-largest sugar producer said on Wednesday that it was responding to a cybersecurity incident affecting parts of

China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance

Cybersecurity researchers have warned of a “resurgence and expansion” of JDY, a covert network associated with China-nexus state-sponsored

Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities

Fortinet, Ivanti, and SAP have released security updates to address multiple critical security vulnerabilities that could result in

Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE

A high-severity unpatched security flaw in Langflow, an open-source low-code platform to build artificial intelligence (AI) applications, has

Can you social engineer an AI? Plus: AI worms and the nonhuman identity problem

The Future of Society Starts With This

The free threat intel tool almost nobody is using