This article is based on primary information from Anthropic, Microsoft, CISA, and others available as of its publication on September 11, 2026. Attack code, malicious domains, and intrusion procedures ...

Orkes Conductor CVE-2026-58138 is under active attack. Patch to 3.30.2 or later, isolate workflow APIs, hunt command ...

We will organize the practical steps for using TypeSafe AI's classification-specific model, "Jev," from obtaining an API key ...

Chainalysis says North Korea and Iran now drive much of the growth in blockchain dead drops as attacks become harder to ...

Brevo confirms a stolen Cloudflare API key was used to inject ClickFix malware into customer website scripts in a major ...

Brevo was compromised and served malicious scripts through tools embedded on customer websites. Visitors saw fake CAPTCHA prompts that tried to make them run malware on their computers. Logged-in ...

Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites ...

Researcher believes overprivileged Iterable creds exposed 8.8M customer records – and could have enabled mass deletion ...

Hackers are using Google Sheets as an unlikely control channel in a cryptocurrency theft campaign. The operation turns a familiar browser session into a place where malicious code runs, rather than ...

Claude Opus 4.6 exploited a simulated gym API flaw in 9 of 10 tests, exposing risks around AI agents, weak authorization, and API security.