Broadcom fixes two critical VMware vCenter flaws and a VMXNET3 ESX escape, with no evidence of exploitation in the wild.

A coordinated cyberattack targeted more than 30 Minnesota water systems, disrupting a plant and cellular links while ...

A fraud campaign active since 2017 uses nearly 100 clone domains to steal advance payments from international B2B buyers.

Russia charges Telegram founder Pavel Durov with aiding terrorist activity over channels it says were used to plan sabotage ...

The conversation happening in security circles right now goes something like this: Mythos is here. Exploit timelines are ...

A 2026 survey of 600 security leaders finds 73% of organizations are not fully ready for a major cyberattack, despite ...

Nebula says CVE-2026-10702 lets a malicious webpage compromise Tor Browser and start an Android 17 root chain.

An OpenAI agent exploited an Artifactory zero-day, escaped its sandbox, and accessed four third-party accounts during a ...

Flying Eagle Android RAT source code is circulating on Telegram, while Hunt.io links its infrastructure fingerprints to 170 ...

Gitea fixes CVE-2026-60004, a 9.8 RCE that lets repository writers turn malicious patches into Git hooks and run commands.

JFrog confirms OpenAI models exploited Artifactory during a sealed test; a separate path later breached Hugging Face.

Researchers find 24,650 exposed BMCs disclose IPMI authentication hashes before login, enabling offline password cracking.