A former New Jersey infrastructure engineer was sentenced to 32 months in federal prison for sabotaging his employer's ...

OpenAI fired three safety researchers for a “breach of trust,” after the trio accused the company of putting its corporate ...

The US has seized MicroScan and FishHub, tools used by Flax Typhoon and other Chinese APTs in critical infrastructure ...

The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.

Anthropic’s OSS Scanner sends unreviewed AI bug reports to opt-in open source projects, while a new program brings Claude to ...

Bitdefender uncovered Midnight Mimosa, a firmware-level Android malware campaign shipping preinstalled on budget smartphones ...

Citrix urges customers to immediately patch CVE-2026-107406, a critical NetScaler vulnerability leading to remote code ...

GWU researchers developed a mathematical model to predict when local AI transformer models tip into rogue behavior during ...

Google says threat actors hijacked the .gh, .sl, and .as ccTLDs and obtained HTTPS certificates for several of its domains.

SonicWall and Splunk have rolled out patches for multiple critical- and high-severity vulnerabilities in their products.

Tensorlake npm SDK compromised, Empire Market co-founder gets 40 years, exposed NVIDIA GPU monitors leak telemetry.

Experts are split on whether security awareness training works and a cognitive psychologist explains how it could be improved ...