Nightmare Eclipse has dropped a zero-day targeting a privilege escalation vulnerability in a Kaspersky endpoint security ...

McKesson has confirmed a data breach as ShinyHunters claimed the theft of 284 million records, including PII and PHI.

ServiceNow has patched three maximum-severity vulnerabilities, including two leading to remote code execution.

Anthropic is warning Claude AI users about infostealer malware infections that enable attackers to run up victims’ usage ...

Boston Scientific is still working to restore systems knocked offline by a cyberattack that disrupted manufacturing and ...

The FulcrumSec extortion group has claimed the theft of more than 80 GB of data from the Manchester Airports Group.

The city of Berlin refuses to pay a ransom after Rhysida claimed the theft of personal information, credentials, and private ...

A federal judge has ruled in favor of artificial intelligence company Anthropic in its legal battle against the Pentagon ...

AI agents breached Hugging Face using conventional tactics and stolen credentials. What security leaders must fix in identity ...

Hackers have started exploiting CVE-2026-66066, referred to as KindaRails2Shell, a critical vulnerability in Ruby on Rails.

PaperCut has released a second emergency patch for the exploited vulnerabilities, which are now tracked as CVE-2026-82078 and CVE-2026-81578.

Threat actors have been exploiting CVE-2026-21962, a critical Oracle HTTP Server and WebLogic vulnerability patched in ...