A look at five active threats making news this week, spanning EDR evasion, nation-state tooling, unpatched vulnerabilities, AI-assisted malware development, and IoT botnet activity.

A quick roundup of what's making waves in security this

This roundup covers vishing, AiTM phishing, a macOS kernel exploit, XSS-to-RCE risk, and a critical Chrome patch, all pointing to the same trend: stolen access over broken security.

AI just had a big week on both sides of the security

FakeGit Used 7,600 GitHub Repositories and AI Registries to Deliver SmartLoader

New MacOS Stealer ClickLock Uses ClickFix to Steal Login Credentials ClickLock doesn&

Exploited AD FS Flaw Gives Attackers a Path Through Elevated Access Microsoft&

Microsoft’s GigaWiper Shows How “All-in-One” Malware Has Become the