Skyw4lker targets U.S. firms with device code phishing that abuses Microsoft 365 authentication to obtain account access ...

A suspected China-linked actor used an AI-assisted PHP2Shell exploit chain to root 25 servers and target Active Directory in ...

Oracle EBS decoys recorded probing of patched CVE-2026-101767, an unauthenticated SQL injection flaw that can lead to remote ...

GMO offers up to $1 million for tips leading to arrests after its Desktop Cloud breach exposed customer data and was linked ...

ShinyHunters exploited three chained Oracle PeopleSoft flaws enabling unauthenticated server takeover, with attacks spanning ...

CISA adds exploited Adobe Commerce and Google Brotli flaws to its KEV catalog as attackers breach stores and target ...

The FBI seized Virtualine's domain as the DoJ accused the bulletproof hosting provider of facilitating cybercrime and ...

Volt Typhoon used the disrupted Silent Train network for four zero-day campaigns targeting enterprise management systems and ...

Anthropic says an unreleased AI model built five working exploit chains across major platforms in lab tests; the reported ...

A critical 16-year-old EDK II flaw allows crafted ICMP messages to crash PXE boots or enable pre-boot code execution on ...

Tailscale 1.104.4 fixes SSH forwarding flaws that could expose root-only sockets, while related issues remain unpatched in ...

Google will let approved third-party Android stores offer one-tap installs and background updates outside the US, subject to ...