IncidentsAnalysis3 min read
Trezor says an extra circuit board inside the wallets copies the recovery phrase off the screen and sends it over the mobile network to an attacker-controlled server.
Threat intelBrief2 min read
Version 20 of the framework tracks prompt injection, theft of app-specific passwords, and attacks on internet-exposed PLCs at Minnesota water utilities, where MITRE says attribution remains unconfirmed.
Threat intelBrief1 min read
OpenSourceMalware says the group behind the GhostAction supply chain attack has moved from malicious GitHub Actions workflows to phishing developers with a stealer disguised as a font file.
VulnerabilitiesCVE-2026-91403CVSS 9.12 min read
Tenable's count puts 1,209 unique CVEs in the quarterly update, 95 of them critical. A separate Java advisory followed a day later.
IncidentsBrief2 min read
Some version 3.0.123 packages carried malware that could hand attackers control of a site once the plugin was activated, Rank Math says.
