Apple’s iOS and macOS 27.2 updates fix 286 flaws, and iOS 18.7.11 brings the fix for exploited CVE-2026-86950 to older ...

DreamHost took the File Manager panel offline for three days and reset the passwords for some of its email and FTP/SFTP users ...

Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.

Security researchers have disabled an abandoned Popcorn Time updater on 2 million systems to prevent malicious abuse.

Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific ...

A cybersecurity incident at the University of New Mexico Health System forced it to send ambulances to other hospitals.

Anthropic filed papers for what could be the biggest IPO of stock ever as its top executive warns AI could pose an ...

Since July 2025, a threat actor has injected a JavaScript loader into 953 online stores, most of them running Magento, Sansec ...

Honeypot data shows attackers successfully exploiting the PHP2Shell vulnerabilities to execute shell commands on PHP servers.

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

Genesys says it has contained a cyberattack that resulted in unauthorized access and theft of data from its LMS and CRM environments.

Anthropic says Mythos 5’s behavior in AISI’s July evaluation was severe, as it used fake identities to submit malicious code ...