RSS
Malicious Claude Code extension distributed through Cursor marketplace
Threat Research
AI used in Aur0ra ransomware testing and execution
‘Node2Shell’ vulnerability (CVE-2026-111497) in active exploitation
Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)
BRONZE SANDCASTLE deploys modified Meterpreter shells
Beyond the mailbox: Graph reconnaissance and ServiceNow user enumeration in a modern identity intrusion
X-ops
Sophos SecOps
ConnectWise Cloud Backup application abused in cross-tenant token sweep
Building intent-based access control without reading minds
AI Research
Citrix NetScaler vulnerability (CVE-2026-88779) in active exploitation