First 2026 cyber recap covering IoT exploits, wallet breaches, malicious extensions, phishing, malware, and early AI abuse.

A fake WhatsApp API that worked flawlessly hid a trap. It stole messages, hijacked accounts, and stayed invisible. Sometimes, ...

The malicious fork, named ‘lotusbail’ has all the same functionality as the legitimate project, but it also steals WhatsApp authentication tokens and session keys. Furthermore, it intercepts and ...

In an increasingly agentic future, the browser won't only act as a window to the web but as the primary workspace for ...

Malicious npm package posing as a WhatsApp Web API library operated for months as a functional dependency while stealing messages and maintaining persistence.

The lotusbail NPM package steals WhatsApp credentials, messages, and contacts, and provides persistent access to the victims’ accounts.

And it's especially dangerous because the code works A malicious npm package with more than 56,000 downloads masquerades as a working WhatsApp Web API library, and then it steals messages, harvests ...

A malicious package in the Node Package Manager (NPM) registry poses as a legitimate WhatsApp Web API library to steal WhatsApp messages, collect contacts, and gain access to the account.

Secured Funding from Patni Family Office to Unify the Fragmented Marketing Landscape with the First Agentic AI Platform Designed to Move B2B Teams from Simple Task Automation to Autonomous Outcome ...