Palo Alto Networks firewalls have been rooted via PHP2Shell exploits, but no WordPress site has been compromised.

Polymarket briefly halted trading after a compromised third-party script, which researchers tied to DebugBear, drained user ...

Drupal has patched CVE-2026-118539, an exploited Commerce Core access bypass that may financially impact online store owners.

An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system.

Anthropic disputes the scope of an ex-DOGE startup’s intrusion, a UEFI flaw affects most servers, and Cloudflare fixes an AI data leak.

Hackers moved over $6 billion out of Binance wallets, and TRM Labs and Chainalysis attribute the attack to North Korea’s ...

Passkeys replace shared secrets with cryptographic credentials. There is no password for an attacker to steal, intercept ...

Hackers are targeting a newly patched high-severity unauthenticated remote code execution vulnerability in WordPress.

It allowed customers to host hack-for-hire services, supported ransomware and infostealer operators, and accepted crypto ...

The Bankruptcy Noticing Center is back online, and BAE Systems says no data was extracted in the October cybersecurity ...

Talos and Lumen tie exploitation of Cisco SD-WAN flaw CVE-2026-20127 to Silent Train, a covert relay network used by Volt Typhoon.

Sony Network Communications says hackers stole 2.6 million So-net and Plala customer records, including 54,401 email ...