A previously undocumented state-backed threat actor named GopherWhisper is using a Go-based custom toolkit and legitimate ...

ThreatsDay Bulletin: active exploits, supply chain attacks, AI abuse, and stealth data risks observed this week.

As Bloomberg reports, the Discord users didn't gain access through a sophisticated hack, but by guessing the online location ...

CVE-2026-34040 lets attackers bypass some Docker authentication plugins by allowing an empty request body. Present since 2024, this bug was caused by a previous fix to the auth workflow. In the ...