Executive Order 14420 targets foreign bulk-power equipment over cyber, sabotage and supply-chain risks.
Microsoft tracks a ClickFix variant that drops a Python reverse tunnel through fake CAPTCHA overlays.
VulnCheck found two factory implants in ZBT router firmware that give unauthenticated attackers root access.
Socket found 19 Chrome and Edge extensions quietly stealing crypto wallet secrets in the Superior campaign.
OS-wide Encrypted Client Hello in Android 17 hides visited domains from carriers and Wi-Fi snoops.
Hunt.io found an exposed server packed with evidence of ownCloud and WordPress intrusions against Philippine targets.
A critical Cosmos EVM balance flaw let attackers drain six blockchains before the patch shipped.
Berlin refuses to pay after Rhysida-linked attackers exfiltrate data from the city's state network.