LANDFALL: New Commercial-Grade Android Spyware in Exploit Chain Targeting Samsung Devices

Microsoft WSUS Remote Code Execution (CVE-2025-59287) Actively Exploited in the Wild (Updated November 3)

Suspected Nation-State Threat Actor Uses New Airstalk Malware in a Supply Chain Attack

The Smishing Deluge: China-Based Campaign Flooding Global Text Messages

Jingle Thief: Inside a Cloud-Based Gift Card Fraud Campaign

When AI Remembers Too Much – Persistent Behaviors in Agents’ Memory

The ClickFix Factory: First Exposure of IUAM ClickFix Generator

TOTOLINK X6000R: Three New Vulnerabilities Uncovered

Operation Rewrite: Chinese-Speaking Threat Actors Deploy BadIIS in a Wide Scale SEO Poisoning Campaign

The Risks of Code Assistant LLMs: Harmful Content, Misuse and Deception