Distributed Workforce

The malicious payloads are deployed using stealthy fileless techniques.

The malicious copycat version of a legitimate MCP project had 1,500 weekly downloads.

While not directly linked, new research from Google and Insikt Group point to China’s cyberespionage strategy.

An attack exploiting the Follina bug included hidden instructions in emails and code, researchers say.

The two sets of malware CISA identified let attackers achieve RCE on a compromised server.

Security pros say teams should consider a firewall breach much like a five-alarm fire.

Zimperium found that 1 in 3 Android apps and more than half of iOS apps leak sensitive data.

OpenAI's artificial intelligence chatbot ChatGPT could have its calendar integration facilitated by the recently introduced Model Context Protocol tool support exploited to enable remote command execution and email account compromise, reports SecurityWeek.