Attackers are increasingly abusing Microsoft’s legacy MSHTA utility to silently deliver malware, stealers, and persistent ...

The B1ack’s Stash dark web carding marketplace has released 4.6 million stolen credit card records as a free download.

The security defect can be exploited remotely, without authentication, to execute arbitrary code and leak sensitive ...

PoC code has been released for DirtyDecrypt, a recently patched Linux kernel vulnerability allowing privilege escalation to ...

The vulnerability, CVE-2026-8153, affects Universal Robots PolyScope 5 and it can be exploited for OS command injection.

Threat actors are exploiting CVE-2026-42945, a critical NGINX vulnerability that leads to remote code execution if ASLR is ...

Grafana confirmed suffering a data breach, two days after a cybercrime group listed the company on its leak website.

Several major healthcare data breaches, affecting millions of individuals, have been added to the tracker maintained by the ...

Pwn2Own Berlin 2026 participants earned a total of nearly $1.3 millon for exploits targeting Windows, Linux, VMware, Nvidia, ...

A threat actor started using the Shai-Hulud worm in attacks only days after the malware’s source code was released.

Microsoft and Palo Alto Networks have separately reported significant results after turning AI on their own code to find ...

Cisco has patched yet another critical SD-WAN zero-day vulnerability, the sixth SD-WAN flaw whose exploitation came to light ...