Signal says its systems are secure but it is taking reports of targeted attempts to hack some officials "very seriously".

Hackers are targeting vulnerabilities in Ivanti Endpoint Manager, SolarWinds Web Help Desk, and VMware Workspace ONE.

Hackers are already probing impacted versions of Nginx web server’s user interface, hunting for credentials and encryption keys.

Hackers have a new tool called ClickFix. The new attack vector combines fake human-verification prompts with malware, trying to trick users into running Terminal commands that bypass macOS security.

GhostClaw poses as an OpenClaw installer package, stealing system credentials and sensitive data before deploying a persistent RAT.