15 Malicious JetBrains Plugins Caught Stealing AI API Keys
Security researchers have uncovered a coordinated campaign on the JetBrains Marketplace that published 15 malicious plugins designed to steal AI…
Security
Cybersecurity, vulnerabilities, threats, and defense
Security Teams Are Drowning in Findings — Validation Is the Bottleneck
Security teams have never had more visibility. Scanners, EDR, attack surface tools, threat feeds — they all pour in findings….
Junior Hacker Used Tailscale and OpenSSH to Keep Access After C2 Went Dark
A French-speaking attacker broke into a small automotive business, planted a keylogger, and stole banking credentials. Standard stuff — until…
Crypto Clipper Malware Campaign Uses Fake Reviews and AI Narrators to Lure Victims
A single threat actor is running a sophisticated campaign to distribute a cryptocurrency clipboard hijacker, using the same marketing playbook…
PCI DSS Rules Tighten Around Third-Party Scripts on Checkout Pages
Here’s a problem most e-commerce teams haven’t reckoned with yet: all those third-party scripts loading on your checkout page? They’re…
DragonForce Hackers Use Microsoft Teams Relays to Hide C2 Backdoor
The DragonForce ransomware gang has been spotted using a custom Go-based remote access trojan called Backdoor.Turn to hide command-and-control traffic…
INC ransomware claims 830 victims as LockBit and BlackCat successors
INC ransomware has become one of the most active ransomware-as-a-service operations in 2026, with researchers counting at least 830 victims…
Microsoft details crypto clipper malware that spreads via USB and hides behind Tor
Microsoft has pulled back the curtain on a cryptocurrency clipping campaign that’s been targeting Windows users since February. The operation,…
Google splits Search history and privacy controls into separate settings
Google is breaking up its privacy settings. If you’ve ever dug through your Google Account wondering how to stop the…
ThreatsDay: Claude chats weaponized, shady npm packages, and Windows Server gets DoH
The internet didn’t break this week. It just got used exactly as designed. That’s the problem. Let’s start with the…