The malvertising campaign, per Bitdefender, is designed to push fake " Meta Verified " browser extensions named SocialMetrics ...

Threat actors are exploiting exposed Docker APIs to deploy malware and cryptocurrency miners and potentially create a new botnet.

An Argo CD vulnerability allows API tokens with even low project-level get permissions to access API endpoints and retrieve all repository credentials associated with the project.