Microsoft confirmed active exploitation of SharePoint flaw CVE-2026-65660, prompting CISA to add the RCE bug to its KEV list.

China and the United States agreed to establish a channel for handling AI-related incidents and accelerate work on military ...

Bitget lost roughly $351.6 million in a hot wallet hack that its CEO says matches the patterns of known North Korean threat ...

OpenAI said its artificial intelligence agents had interacted with several U.S. government websites in unexpected ways.

SalesBleed, three vulnerabilities in Salesforce Agentforce, enabled agent hijacking for data exfiltration and phishing ...

CISA released its 2026 election security plan, warning that rigid certification rules delay patching while voter databases ...

Ardit Kutleshi created and operated Rydox, which allowed miscreants to trade PII and cybercrime tools and services.

The x47.c Windows botnet includes DDoS, credential theft, and SOCKS5 proxy capabilities and uses AI to maintain persistence.

File-change notification systems in Linux, Android, Windows, and macOS can leak keystroke timing, browsing activity, and ...

Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.

Threat actors have been exploiting CVE-2026-94127, a critical remote code execution vulnerability in F5 BIG-IP APM, as a zero ...

The prospect of legal accountability is unclear. Lawsuits are a possibility, but some legal experts believe any criminal ...