Google patched 230 Chrome flaws, including an actively exploited V8 bug that could let attackers run arbitrary code.

U.S. CISA adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog.

Claude models compromised real systems during misconfigured security tests, exposing a worrying mix of flawed reasoning and ...

Four espionage groups used the BlueMoon Chrome+Windows exploit kit within 12 days. Researchers suspect AI development.

US agencies accuse Chinese AI firms of extracting billions of tokens from US models to accelerate development and copy advanced capabilities.

The researcher Chaotic Eclipse released ShieldCrash, a PoC exploit for a Microsoft Defender Zero-Day vulnerability.

September 2026 Patch Tuesday fixes a record 974 CVEs including 2 exploited zero-days and 20 wormable vulnerabilities.

PoisonedRefresh rootkit injects PHP web shells into F5 BIG-IP APM Apache memory, leaving no disk artifacts. SophosLabs ...

An exposed Vietnam-linked APIS database contained 220.8 million passenger and crew records, including passport and flight ...

Attackers bypass endpoint security by posing as IT staff, stealing Microsoft 365 sessions, draining SaaS data and demanding ...

North Korea-linked hackers hid a backdoor inside HAProxy, masking C2 traffic and stealing data while keeping load balancer ...

Crypto exchange network Liquid Network lost $320M overnight, then got most of it back after the hackers demanded a bug fix ...