Microsoft has patched 18 vulnerabilities in AI and cloud products such as Copilot, Azure, Dataverse, and Fabric.

Threat actors are exploiting CVE-2026-58138, a critical-severity remote code execution vulnerability in Orkes Conductor.

Hackers used a malicious worker to inject scripts into more than 100,000 websites via the Brevo supply chain attack.

The FBI has seized the domains associated with NightmareStresser, one of the longest-running DDoS-for-hire services.

MIND has raised $72 million in Series B funding to accelerate product development and expand enterprise market presence.

To demonstrate the access without reading any internal code, Hacktron says it took over an OpenAI employee’s account whose Codex integration was linked to OpenAI’s GitHub organization, then used it to ...

Ransomware developer sentenced to prison on Switzerland, Plugin4Shell attack targets AI coders, organizations warned of SAP flaw.

Gyazo has suffered a data breach that exposed the records of 23 million users, along with 490 million image metadata records.

The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to ...

Cisco has patched dozens of FMC, ISE, and Nexus Dashboard vulnerabilities, including three flaws already publicly disclosed.

Security firms Check Point, Kaspersky, and Tanium have each patched severe vulnerabilities in their products, including RCE flaws.

Ransomware attacks on manufacturers rose 40% in early 2026, as threat groups target supply-chain disruption and increasingly ...