A weekly look at exploited flaws, exposed systems, supply-chain attacks, browser abuse, malware campaigns, and the security risks that mattered most.

Spread the loveEver found yourself setting up a new development machine, only to spend hours painstakingly reconfiguring your ...

Malicious browser extensions are giving attackers another route into corporate environments, with phishing campaigns tricking users into installing tools capable of running arbitrary code. Cyber Daily ...

As the role of digital infrastructure becomes increasingly important in supporting South Africa’s economic growth, data centres have become critical in shaping this landscape, serving customers in ...

Figma has revolutionized the design landscape, hasn’t it? It’s become the go-to tool for everything from quick wireframes to intricate, pixel-perfect UI designs. Teams collaborate seamlessly, ...

Cloudflare announced a developer preview that lets any website enable a WebMCP (Web Model Context Protocol) interface with a ...

Cloudflare has introduced Cloudflare Computer, a new open-source runtime designed to give AI agents something closer to a ...

A new Mini Shai-Hulud wave hit keyv and 800+ npm packages. The malware now scans 469 secret locations, including AI agents, ...

To minimize the exposure of company data, AI agents start out with no permissions to access or share resources and must ...

A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicious infrastructure harder to detect while ...

NullReceiver lets two North Korea-linked npm packages decode a C2 IP from blank Ethereum transfers without smart contracts or ...