Russia-linked APT28 has exploited a high-severity XSS vulnerability in Zimbra in attacks against Ukrainian entities.
Magecart hides payload in favicon EXIF via third-party scripts, bypassing static analysis and stealing checkout data at runtime.
What we learned onboarding autonomous bots with OpenClaw and NanoClaw, and why Claude Code kept trying to neuter our agents. It’s pretty clear that the big theme for 2026 ...