A newly disclosed security flaw impacting NGINX Plus and NGINX Open has come under active exploitation in the wild, days ...

Grafana disclosed an unauthorized party accessed its GitHub environment and downloaded its codebase via a token.

Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that it said has come ...

Mini Shai-Hulud hit 2 OpenAI devices via TanStack, exposing limited credentials and forcing macOS certificate updates by June ...

CISA added CVE-2026-20182, a CVSS 10.0 Cisco Catalyst SD-WAN Controller authentication bypass flaw, to its KEV catalog.

Turla turns Kazuar into a 3-module P2P botnet, enabling stealthy C2, resilient tasking, and persistent access.

Trusted-tool abuse hit 84% of 700,000 incidents, driving 45-day assessments that reduce attack surface by 30%+.

An anonymous cybersecurity researcher who disclosed three Microsoft Defender vulnerabilities has returned with two more ...

Cybersecurity researchers are sounding the alarm about what has been described as "malicious activity" in newly published ...

OpenAI launched Daybreak with GPT-5.5-Cyber tools as AI accelerates vulnerability discovery and exploit timelines.

Ghostwriter’s March 2026 Ukraine attacks use PDF lures and geofencing to deploy Cobalt Strike on government targets.

Cybersecurity researchers have disclosed a set of four security flaws in OpenClaw that could be chained to achieve data theft ...