The Megalodon supply chain attack poisoned over 5,500 GitHub repositories via automated commits injecting GitHub Actions workflows.

The stealthy vulnerability impacts roughly 88 million domains and can be exploited to bypass DNS filtering and hide ...

Hackers accessed names, addresses, Social Security numbers, financial information, and medical data from third-party partner repositories. Immigration and legal case management platform DocketWise is ...

Many findings have been confirmed to be critical or high-severity vulnerabilities and the number will continue to increase. Anthropic says its Claude Mythos model discovered thousands of severe ...

Radiology Associates of Richmond (RAR) has disclosed a data breach impacting the protected health information of 266,000 individuals. According to the healthcare organization’s incident notice, the ...

Verizon’s 2026 DBIR shows vulnerability exploitation was the top breach vector in 2025 as AI accelerated attacks, ransomware ...

Microsoft this week released patches for two vulnerabilities in Defender, warning they have been exploited in the wild as ...

Microsoft has announced mitigations for CVE-2026-45585, a BitLocker bypass triggered via FsTx in Windows Recovery.

Drupal warns users that it has seen attempts to exploit CVE-2026-9082 and security firms are seeing attacks against thousands ...

CISA contractor exposes credentials, Mythos testing and new features, Huawei router flaw triggered telecom blackout.

Attackers are increasingly abusing Microsoft’s legacy MSHTA utility to silently deliver malware, stealers, and persistent ...

Four popular Composer packages maintained by the Laravel-Lang organization were poisoned with malware after hackers rewrote all their Git tags, security researchers ...