New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens 
Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers 
Auditor-Verifiable Evidence: NSAuditor AI Enterprise 0.33.1 Puts RFC 3161 Trusted Timestamps in All Seven Framework Reports 
ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets 
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer 
New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens
What's new: New research presented at Black Hat USA 2026 reveals vulnerabilities in webmail services such as Outlook, Gmail, Fastmail,...
Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
What's new: Atlassian's Rovo assistant can be exploited to exfiltrate Jira and Confluence data to attackers. Two security firms discovered...
Auditor-Verifiable Evidence: NSAuditor AI Enterprise 0.33.1 Puts RFC 3161 Trusted Timestamps in All Seven Framework Reports
Every pre-audit evidence pack carries an unspoken asterisk: trust the tool that produced it. Sooner or later an assessor asks...
ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets
What's new: ClickFix attacks are being utilized to deliver a Go-based macOS malware that can steal cryptocurrency, browser passwords, and...
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
What's new: Nearly 800 malicious npm packages have been identified, designed to deliver cross-platform malware targeting Windows, Mac, and Linux...