Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures to deliver malware.

ChatGPT malware campaign plants a fake model on OpenAI’s real chatgpt.com, directing Windows users to a ClickFix PowerShell lure that delivers an 8-stage remote access trojan with full surveillance ...

Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity ...

Check Point has disclosed an actively exploited zero-day vulnerability in its management infrastructure that lets unauthenticated attackers upload and run arbitrary scripts on vulnerable servers.

A Chinese threat actor has been targeting vulnerable ZyXEL GS1900 switches worldwide for sensitive information exfiltration, threat intelligence firm GreyNoise warns. Tracked as CVE-2026-7273 (CVSS ...

Chinese threat actors have expanded their use of a chained Chrome and Windows zero-day exploit kit, using convincing fake websites to target victims with malware. Volexity linked the latest activity ...

Income investors will have much fodder to chew on later this afternoon as Fed Chair Kevin Warsh delivers the FOMC decision on interest rates, which, by and large, appears to be largely priced in.

Attackers now exploit a critical-severity ConnectWise ScreenConnect vulnerability in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). ConnectWise shared ...