Three critical issues in the Fireware OS iked process could allow unauthenticated attackers to execute arbitrary code ...

The cybersecurity agency CISA added CVE-2026-82078 and CVE-2026-81578 to its Known Exploited Vulnerabilities (KEV) catalog on ...

McKesson has confirmed a data breach as ShinyHunters claimed the theft of 284 million records, including PII and PHI.

Nightmare Eclipse has dropped a zero-day targeting a privilege escalation vulnerability in a Kaspersky endpoint security ...

ServiceNow has patched three maximum-severity vulnerabilities, including two leading to remote code execution.

The FulcrumSec extortion group has claimed the theft of more than 80 GB of data from the Manchester Airports Group.

Boston Scientific is still working to restore systems knocked offline by a cyberattack that disrupted manufacturing and ...

Anthropic is warning Claude AI users about infostealer malware infections that enable attackers to run up victims’ usage ...

A federal judge has ruled in favor of artificial intelligence company Anthropic in its legal battle against the Pentagon ...

The city of Berlin refuses to pay a ransom after Rhysida claimed the theft of personal information, credentials, and private ...

AI agents breached Hugging Face using conventional tactics and stolen credentials. What security leaders must fix in identity ...

Hackers have started exploiting CVE-2026-66066, referred to as KindaRails2Shell, a critical vulnerability in Ruby on Rails.