Hackers are exploiting CVE-2026–59310, a critical vulnerability in VMware vCenter that leads to arbitrary code execution.

WordPress has patched CVE-2026-65640, a high-severity vulnerability that allows authenticated attackers to execute arbitrary code.

White House directive allows vetted private companies to conduct offensive cyber operations against foreign cybercrime organizations.

Nightmare Eclipse has dropped ShieldBreak, a Windows zero-day exploit that allows any user to gain System privileges.

Fortinet has patched eight vulnerabilities, including high-severity authentication bugs in FortiWeb and FortiManager.

Israel-based venture fund Team8 announced this week that it has secured $365 million in additional capital. The company says $265 million is for Team8 Capital’s third fund, while $100 million will be ...

Threat actors started exploiting an unpatched zero-day vulnerability in GeoServer hours after it was publicly disclosed, attack surface management firm WatchTowr says. The security defect, described ...

SharePoint vulnerability CVE-2026-55040 is now being exploited in the wild, with the attacks starting shortly after the release of a PoC ...

Interview with Marcus Hutchins, aka MalwareTech, and his journey from black hat hacker to cybersecurity professional.

In a second attack on the Poland’s power grid in 2025, hackers targeted ICS via a private APN and their objective was purely ...

Stealthy City-Forum attacks use a custom toolset to exploit guest access and extract exposed data from Salesforce and ServiceNow environments.

AI security firm Mindgard has raised $30 million in Series A funding to scale product, engineering, sales, and marketing teams.