CyberSN’s jobs report shows US cybersecurity job postings fell 26% in January–September 2026, while AI Security Engineer ...

Citizen Lab has uncovered AdFection, an operation delivering Candiru spyware via malicious ads, in zero-click attacks.

Chinese APT Armory Castle exploited a BeyondTrust vulnerability tracked as CVE-2026-102764 as a zero-day since August.

Proofpoint announced a definitive agreement to acquire data security company Varonis for $6.3 billion in an all-cash ...

A cyber incident at defense contractor BAE Systems has halted federal bankruptcy notices and creditor services across US ...

Microsoft has rolled out fixes for over 30 vulnerabilities, including two dozen high-severity remote code execution bugs in ...

Copeland and Dixell controllers were also hit in the supermarket refrigeration attack, which affected 700 stores and remains ...

Cisco warns that hackers have been exploiting CVE-2026-76519, an arbitrary file write vulnerability in Secure Email Gateway.

Security and application delivery firm F5 announced fixes for 11 security defects in NGINX. Among them, CVE-2026-15176 and ...

The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available.

Starting February 2027, Let’s Encrypt will move to 64-day certificate lifetimes by default, ahead of 45-day lifetimes in 2028 ...

ICS-Sniper attack picks off critical OT traffic, XWorm operators’ panels open to takeover, and AI-aided Chrome exploit earns $250,000.