Microsoft urges organizations to test PKI, HSMs and security appliances for post-quantum authentication before deploying new cryptography.

VirusTotal added daily public IPv4 scanning to help security teams detect C2 servers and track malware infrastructure.

A fake Android PDF reader on Google Play gained 10,000+ installs while delivering Anatsa banking malware to steal financial ...

DarkSword operators use Coruna malware to steal iPhone crypto wallet recovery phrases, with exposed servers revealing theft ...

Citrix has urged customers to patch a critical security flaw in NetScaler ADC and NetScaler Gateway that could allow remote code execution or cause a denial of service. Tracked as CVE-2026-107406, the ...

Leaked Silent Ransom Group chats allege $206.95 million in payments from 27 firms over six months without file encryption.

An AI-powered hacking tool helped breach South Korean financial firms, exposing customer and employee data across multiple ...

Public PoC released for CVE-2026-102489, a critical Zammad flaw enabling unauthenticated session cookie theft and potential code execution.

Microsoft Teams is preparing to support synthetic audio and video detection to help organizations spot deepfake attacks. The ...

GreyNoise has identified a rise in scanning and remote code execution attempts targeting video surveillance devices in Ukraine between September 21 and October 1, 2026.

A malicious Tensorlake npm release carries a Shai-Hulud worm variant that steals developer secrets and spreads through ...

GhostAction compromised 772 GitHub repositories using fake workflows to steal CI/CD secrets, cloud keys, tokens and ...