Malicious npm Package Disguises as OpenClaw Installer for Data Theft
March 11, 2026
New npm threat involves package posing as OpenClaw installer deploying RAT to steal sensitive data.
Application Security
Malicious npm Package Disguises as OpenClaw Installer for Data Theft
New npm threat involves package posing as OpenClaw installer deploying RAT to steal sensitive data.
ShinyHunters Breaches Salesforce and 100 Companies Using Mandiant’s Own Tool
ShinyHunters claims responsibility for a high-profile data breach affecting Salesforce and other major companies, utilizing an open-source tool develo...
Salesforce’s Experience Cloud Platform Faces Vulnerability Challenges
Salesforce's Experience Cloud under scrutiny as vulnerabilities expose extensive data risks.
Perplexity’s Comet Browser Had a Flaw That Left Users Vulnerable to Local File Theft
A vulnerability in Perplexity's Comet browser exposed local files to potential theft via calendar events.
WordPress Plugin Vulnerability Puts Over 60,000 Sites at Risk
A critical flaw in WordPress's User Registration & Membership plugin threatens over 60,000 sites, risking exploitation.
Cryptojacking Campaign Exploits Pirated Software to Deploy XMRig Miner
New cryptojacking campaign uses pirated software to deliver XMRig miner payloads onto hosts.
Microsoft Investigates Vanishing Mouse Pointer Bug in Classic Outlook
Microsoft investigates an issue causing Outlook's mouse pointer to disappear for some users.
GitHub’s Dependabot is Under Fire for Alert Accuracy Issues
A Go library maintainer questions the effectiveness of GitHub's Dependabot due to alert fatigue from inaccurate dependency-scanning alerts.
Cybercriminal Group Exploits Hundreds of FortiGate Firewalls Using Off-the-Shelf AI Tools
A cybercrime group used off-the-shelf AI tools to target FortiGate firewalls in 55 countries.
Anthropic Introduces Claude Code Security for Vulnerability Detection
Anthropic's new feature scans code for vulnerabilities, suggesting targeted patches.
ShinyHunters Breaches Salesforce and 100 Companies Using Mandiant’s Own Tool
March 11, 2026
ShinyHunters claims responsibility for a high-profile data breach affecting Salesforce and other major companies, utilizing an open-source tool develo…
Salesforce’s Experience Cloud Platform Faces Vulnerability Challenges
March 11, 2026
Salesforce’s Experience Cloud under scrutiny as vulnerabilities expose extensive data risks.
Perplexity’s Comet Browser Had a Flaw That Left Users Vulnerable to Local File Theft
March 6, 2026
A vulnerability in Perplexity’s Comet browser exposed local files to potential theft via calendar events.
WordPress Plugin Vulnerability Puts Over 60,000 Sites at Risk
March 6, 2026
A critical flaw in WordPress’s User Registration & Membership plugin threatens over 60,000 sites, risking exploitation.
Cryptojacking Campaign Exploits Pirated Software to Deploy XMRig Miner
February 25, 2026
New cryptojacking campaign uses pirated software to deliver XMRig miner payloads onto hosts.
Microsoft Investigates Vanishing Mouse Pointer Bug in Classic Outlook
February 25, 2026
Microsoft investigates an issue causing Outlook’s mouse pointer to disappear for some users.
GitHub’s Dependabot is Under Fire for Alert Accuracy Issues
February 25, 2026
A Go library maintainer questions the effectiveness of GitHub’s Dependabot due to alert fatigue from inaccurate dependency-scanning alerts.
Cybercriminal Group Exploits Hundreds of FortiGate Firewalls Using Off-the-Shelf AI Tools
February 24, 2026
A cybercrime group used off-the-shelf AI tools to target FortiGate firewalls in 55 countries.
Anthropic Introduces Claude Code Security for Vulnerability Detection
February 23, 2026
Anthropic’s new feature scans code for vulnerabilities, suggesting targeted patches.
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.