The infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp.

Application Security Breaking news, news analysis, and expert commentary on application security, including tools & technologies.

Through targeted, company-specific actions, the US government has taken the unprecedented step of extending export controls to both ...

AryStinger malware has infected 4,300 Realtek RTL819X routers, using old CVEs to scan targets, tunnel traffic, and hide ...

Nextcloud CEO: Open source moves from 'a nerdy audience' to the geopolitical stage Frank Karlitschek, head of the German software vendor, talked about the company’s decision to help develop the ...

ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain ...

A malicious extension in the Chrome Web Store is masquerading as the Perplexity AI answer engine, intercepting search traffic and collecting browsing information. 18 kits, a 37x spike in detections, ...

Microsoft is reportedly preparing thousands of job cuts as AI spending rises, with sales, consulting, and Xbox among the areas expected to be affected. If you can only read one tech story a day, this ...

Anthropic has spent much of this week fighting to get its newest AI models back online after the Trump administration ...

Cisco disclosed a critical server-side request forgery vulnerability in its Unified Communications Manager platform on Wednesday, and by Thursday morning working proof-of-concept exploit code was ...

Wildfires may happen more often during the summer and early fall, but they can happen any time of the year in California.

Steve Kornacki analyzes key election results in Colorado, including NBC News' projections of John Hickenlooper winning the ...