Hackers have been exploiting a critical OS injection vulnerability in Arista VeloCloud Orchestrator as a zero-day.

Tal Kollander’s history divides neatly into two halves: first as an active hacker and then as the block that stops hacks.

Hush Security has raised $30 million in Series A funding to expand its team, ecosystem support, and corporate partnerships.

Google is adopting a new two-word naming convention for tracking threat actors, based on public reporting and categorization.

Australian power company Origin Energy Limited said the recent data breach affects 900,000 current and former customers.

Hackers are exploiting a critical, unpatched remote code execution (RCE) vulnerability in Fastjson without authentication.

Decades after it appeared in “The Terminator,” Skynet looks more like a forecast of the incident when a rogue AI system ...

The Nvidia-led coalition aims to give defenders more open tools for testing, auditing and protecting AI models and agents.

GitHub’s Dependabot waits three days before opening pull requests, and PyPI rejects file uploads to releases older than 14 ...

A Cl0p ransomware affiliate has been exploiting a critical-severity vulnerability in PTC Windchill for remote code execution.

Lookout's Mobile Security Exposure Center creates SBOMs for enterprise mobile apps to uncover vulnerable components, ...

The Act Security platform helps remove exposed paths used by attackers and deploy agents safely by enforcing boundaries around AI workloads.