The Bluekit phishing kit provides dozens of website templates, automated domain registration, an AI Assistant, and other ...

OFAC hits Iranian central bank crypto reserves, ADT suffers major data leak, and CISA guidance for zero trust in OT ...

Over 1,800 developers were affected by the Mini Shai-Hulud supply chain attack that hit the PyPi, NPM, and PHP ecosystems ...

Forescout has identified tens of thousands of exposed RDP and VNC servers that can be mapped to specific industries.

Two cybersecurity experts from the United States have been sentenced to prison over charges related to their role in ...

Google has overhauled its Vulnerability Reward Programs (VRP) for Chrome and Android in response to a surge in the use of AI ...

The new kit aims to address risks related to poisoned models, regulatory issues, supply chain integrity, and incident ...

Copy Fail, a logic bug in the Linux kernel, allows users to write 4-byte code into other files’ page cache and achieve root ...

A critical-severity authentication bypass vulnerability in cPanel & WHM has been exploited as a zero-day since February 2026.

Threat actors are abusing Hugging Face and ClawHub to distribute malware by injecting indirect prompts into malicious files.

Four SAP NPM packages compromised in the Mini Shai-Hulud supply chain attack trigger a Bun runtime to install an information ...

A new alert issued by the FBI warns of a surge in cyber-enabled cargo theft, with hackers targeting both brokers and carriers ...