Ransomware operators are actively exploiting CVE-2026-0257, an authentication bypass affecting Palo Alto Networks PAN-OS ...
Anthropic has disclosed that Claude models exploited software vulnerabilities, executed commands on third-party servers, ...
FortiGuard Labs has documented an August 2026 Casbaneiro campaign against users in Latin America. It uses a geofenced, ...
A critical vulnerability in Google’s shared DevSite platform allowed unauthenticated attackers to forge Flask session cookies ...
Microsoft is extending Teams security to detect malicious links hidden inside QR codes and warn users after a message is ...
The U.S. Cybersecurity and Infrastructure Security Agency has added CVE-2016-3081, a decade-old Apache Struts remote code ...
REA, short for Reverse Engineer Anything, is an open-source tool that connects AI coding agents to software analysis engines, ...
A newly released working exploit for AnyPwn, a pre-authentication heap buffer overflow in AnyDesk Linux 8.0.2 that enables ...
A newly disclosed unprecedented surge in suspected Iranian VPN-over-DNS activity, with one domain generating 40 billion ...
Threat actors are exploiting two zero-day vulnerabilities in Ahsay Cloud Backup Server (AhsayCBS) to compromise exposed ...
DarkBlinders hackers are using a fake video meeting application and GitHub repositories to conduct cyberespionage against ...
Splunk has disclosed a critical vulnerability in Splunk Enterprise that allows unauthenticated attackers to execute operating ...