PM This week in cybersecurity: botnets, RCE flaws, AI-driven attacks, stealers, and more. Fast, no-fluff roundup.

GlassWorm uses a fake WakaTime VS Code extension to infect IDEs, deploy RATs, and steal data, prompting urgent credential ...

If you have been in the music industry for even one month, Audacity will be nothing new. Audacity is one of the best professionally designed audio editing tools available for free on different ...

The design flaw in Flowise’s Custom MCP node has allowed attackers to execute arbitrary JavaScript through unvalidated ...

Threat actors have started exploiting CVE-2025-59528, a critical Flowise vulnerability leading to remote code execution.

This post talks about what is an STP file and how you can open such files in Windows 11/10. STP or STEP is a 3D assembly file saved in Standard for the Exchange of Product Data (STEP) format.

A new wave of device code phishing shows how threat actors are scaling account compromise using AI and end‑to‑end automation.

As enterprises rely more heavily on AI technologies and services, attackers’ living-off-the-land techniques have evolved to ...

The Internet Bug Bounty program has paused new submissions, citing a massive expansion in vulnerability discovery by AI code ...