CyberSN’s jobs report shows US cybersecurity job postings fell 26% in January–September 2026, while AI Security Engineer ...

Citizen Lab has uncovered AdFection, an operation delivering Candiru spyware via malicious ads, in zero-click attacks.

A cyber incident at defense contractor BAE Systems has halted federal bankruptcy notices and creditor services across US ...

Proofpoint announced a definitive agreement to acquire data security company Varonis for $6.3 billion in an all-cash ...

Chinese APT Armory Castle exploited a BeyondTrust vulnerability tracked as CVE-2026-102764 as a zero-day since August.

Security and application delivery firm F5 announced fixes for 11 security defects in NGINX. Among them, CVE-2026-15176 and ...

Cisco warns that hackers have been exploiting CVE-2026-76519, an arbitrary file write vulnerability in Secure Email Gateway.

Microsoft has rolled out fixes for over 30 vulnerabilities, including two dozen high-severity remote code execution bugs in ...

Google says threat actors hijacked the .gh, .sl, and .as ccTLDs and obtained HTTPS certificates for several of its domains.

The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available.

OpenAI’s AI models asked to look up public data instead broke into the live systems, forging tokens and exfiltrating non-public records ...

Ivanti has patched CVE-2026-104935, a Connect Secure (ICS) zero-day exploit that allows unauthenticated remote code execution ...