Nyroxis – Personal Endpoint Security https://validator.w3.org/feed/docs/rss2.html DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability Blog Malicious npm Package Stole Files From Claude AI User Directory via GitHub Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code Grandoreiro Malware and BTMOB RAT Campaigns Target Windows and Android Users Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 More New AI Usage Report: Enterprise AI Risk Is Heavily Concentrated Among a Small Group of AI “Power users” What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels 5 Steps to Managing Shadow AI Tools Without Slowing Down Employees GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure 3 SOC Steps that Shut Down Incident Risks Early nyroxis home New Russian-Linked GREYVIBE Targets Ukraine with AI-Powered Cyberattacks MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries [THN Webinar] New AI DDoS Attacks Are Smarter. Learn How to Fight Back Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions MFA Prompt Bombing: Why Your Second Factor Isn’t Saving You CERT-In Recommends 12-Hour Patching for Internet-Facing Flaws Amid AI-Assisted Attacks npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks ⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks The Alert Firehose Finally Meets Its Match Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO 9-Year-Old Linux Kernel Flaw Enables Root Command Execution on Major Distros Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware Microsoft Takes Down Malware-Signing Service Behind Ransomware Attacks Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph API Agent AI is Coming. Are You Ready? Agent AI is Coming. Are You Ready? GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal Repos Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Apps Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories Microsoft Warns of Two Actively Exploited Defender Vulnerabilities When Identity is the Attack Path Making Vulnerable Drivers Exploitable Without Hardware – The BYOVD Perspective Kimwolf DDoS Botnet Operator Arrested in Canada Over DDoS-for-Hire Attacks CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV