Threat actor leverages fake repositories to trick users into downloading infostealer malware disguised as legitimate tools.

Microsoft's July 2026 Patch Tuesday delivers fixes for a record 570 vulnerabilities, including three actively exploited zero-days.

A critical vulnerability in the Cursor code editor, disclosed publicly without a patch, highlights the growing risks of unaddressed zero-days.

Microsoft's latest update for Windows 10 addresses over 570 vulnerabilities, including critical fixes from July 2026.

A critical zero-day vulnerability forced Progress Software to shut down ShareFile Storage Zone Controllers, impacting numerous enterprise clients.

Attackers are impersonating password managers with fake security alerts to steal user credentials.

The Free Software Foundation's sysadmin team developed an automated system to detect and block malicious botnet activity in real-time.

Picus Labs introduces TTP chaining to test exploitability by mapping attack techniques, bypassing risky live exploit execution.

Microsoft is making passkeys the default sign-in method for Entra ID, phasing out traditional passwords for enterprise users.

As AI agents gain autonomy, the critical challenge shifts from intelligence to verifiable identity, permissions, and accountability.