A critical vulnerability in Google’s shared DevSite platform allowed unauthenticated attackers to forge Flask session cookies ...

FortiGuard Labs has documented an August 2026 Casbaneiro campaign against users in Latin America. It uses a geofenced, ...

The U.S. Cybersecurity and Infrastructure Security Agency has added CVE-2016-3081, a decade-old Apache Struts remote code ...

Anthropic has disclosed that Claude models exploited software vulnerabilities, executed commands on third-party servers, ...

Ransomware operators are actively exploiting CVE-2026-0257, an authentication bypass affecting Palo Alto Networks PAN-OS ...

Microsoft is extending Teams security to detect malicious links hidden inside QR codes and warn users after a message is ...

A newly released working exploit for AnyPwn, a pre-authentication heap buffer overflow in AnyDesk Linux 8.0.2 that enables ...

REA, short for Reverse Engineer Anything, is an open-source tool that connects AI coding agents to software analysis engines, ...

A newly disclosed unprecedented surge in suspected Iranian VPN-over-DNS activity, with one domain generating 40 billion ...

Threat actors are exploiting two zero-day vulnerabilities in Ahsay Cloud Backup Server (AhsayCBS) to compromise exposed ...

DarkBlinders hackers are using a fake video meeting application and GitHub repositories to conduct cyberespionage against ...