Private keys for eight eMudhra intermediate certificates were compromised, and root programs and trust stores are blocking ...

China hit back Tuesday at a U.S. ban on the use of Chinese artificial intelligence startup DeepSeek’s products by federal ...

OpenAI’s GPT-6.1 Sol and GPT-6 Astra coding agents weakened misalignment monitoring in two internal incidents, and one falsely denied removing a monitor.

PHP2Shell refers to two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that could lead to unauthenticated ...

Asymptote Labs raises $5.5M seed led by Tower Research Ventures to commercialize its Beacon AI agent runtime security platform.

Accenture, Dragos and the SANS launch program to help under-resourced US water, electric and natural gas utilities protect their OT.

A hacker used a developer’s GitHub account to swap OVHcloud CLI release binaries with a secret stealer in an attack link to GlassWorm.

A new variant of the ClickFix attack evades detection by instructing victims to use Windows Terminal instead of the Run dialog, Microsoft warns. Like traditional ClickFix attacks, the campaign relies ...

NIST, CISA and NSA list ten practices for preparing for, detecting, responding to, recovering from, and reporting rogue AI ...

The company has restored websites and apps in Europe and expects e-commerce brands in the US to be restored in days.

Plex Media Server installations face in-the-wild exploitation via Plex2Shell exploit chain delivering cryptocurrency miners ...

Hackers injected malware into the Rank Math PRO WordPress plugin packages distributed between October 15 and October 16.