Starting February 2027, Let’s Encrypt will move to 64-day certificate lifetimes by default, ahead of 45-day lifetimes in 2028 ...

Exploitation of CVE-2026-102255, a critical pre-authenticated SSRF flaw in SonicWall SMA1000, started days after public disclosure.

A former New Jersey infrastructure engineer was sentenced to 32 months in federal prison for sabotaging his employer's ...

Bitdefender uncovered Midnight Mimosa, a firmware-level Android malware campaign shipping preinstalled on budget smartphones ...

Google says threat actors hijacked the .gh, .sl, and .as ccTLDs and obtained HTTPS certificates for several of its domains.

OpenAI fired three safety researchers for a “breach of trust,” after the trio accused the company of putting its corporate ...

Anthropic’s OSS Scanner sends unreviewed AI bug reports to opt-in open source projects, while a new program brings Claude to ...

Cisco has patched over a dozen critical vulnerabilities that could lead to RCE, DoS, privilege escalation, and other types of ...

The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.

Citrix urges customers to immediately patch CVE-2026-107406, a critical NetScaler vulnerability leading to remote code ...

SonicWall and Splunk have rolled out patches for multiple critical- and high-severity vulnerabilities in their products.

Threat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian’s self-hosted Data Center products ...