An alleged leader of Tren de Aragua’s ATM jackpotting activities, Canelon Aguirre was on the FBI’s top 10 most wanted list ...

A company’s lawful access to Denmark’s Central Person Register was abused to steal the information of 8.8 million people.

Eight NPM packages with 40,000 downloads have been delivering malware in the MALFEX supply chain attack campaign.

Apple plans additional Full Disk Access controls in macOS amid growing risks posed by more capable and autonomous AI agents.

Thirty-nine cybersecurity-related merger and acquisition (M&A) deals were announced by companies in September 2026.

Security awareness training falls short against social engineering, driving adoption of real-time AI detection tools to stop deepfakes ...

Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Reward Program.

CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE.

Citrix NetScaler instances are being targeted via CVE-2026-88779, a zero-day vulnerability exploited against fully patched ...

Hackers stole the information of over 250,000 people from Clover Health Investments and AngMar Management Services.

The ClingSTUN Linux backdoor targets dozens of vulnerabilities, sets up at-boot persistence, and contains exploits for self-propagation.

OpenAI faces lawsuit over its agents’ attacks, and Anthropic warns that liability for autonomous AI remains an open legal ...