North Korean state-sponsored group ScarCruft, also known as APT37, has been using spear-phishing emails that impersonate Microsoft Account security alerts to spread NarwhalRAT malware. The messages wa
Bitwarden CLI was compromised in a supply chain attack tied to the ongoing Checkmarx campaign, according to JFrog and Socket. The affected release was **@bitwarden/cli@2026.4.0**, which contained mali
Cisco has released patches for four critical vulnerabilities affecting its Identity Services Engine (ISE), ISE Passive Identity Connector (ISE-PIC), and Webex Services. The flaws could enable remote c
OpenAI has launched GPT-5.4-Cyber, a variant of its flagship GPT-5.4 model tailored for defensive cybersecurity applications. This announcement comes shortly after rival Anthropic introduced its own m
A critical unpatched vulnerability in the GNU InetUtils telnet daemon (telnetd), identified as CVE-2026-32746, poses a significant security risk, with a CVSS score of 9.8 out of 10. This flaw, discove