Open source Git service Gogs is affected by a critical-severity zero-day vulnerability that exposes servers to remote code execution.

Novee researchers discovered an account takeover vulnerability in the open source CFP management tool Pretalx.

A Romanian national has been sentenced to prison in the United States after he admitted to selling access to an Oregon state ...

Identity security and quantum resilience company Lastwall raised $11.5 million in a Series A extension round to accelerate ...

The BTMOB RAT is targeting Android users to steal financial transactions and sensitive data, and to take over their devices.

IBM and Red Hat's Project Lightwell is a joint initiative to secure open source software backed by a $5 billion investment.

Lithuanian authorities are on high alert after a massive data leak involving more than 600,000 entries from national data ...

AI security and governance provider Geordie has raised $30 million in Series A funding to enhance product capabilities.

Anthropic has announced two new security features for its Claude AI: a self-hosted sandbox and a new security guidance plugin ...

Artificial intelligence is “an unstoppable force” that is being weaponized in ways that fall just short of traditional ...

SymJack’ attack shows how AI coding agents can be manipulated through malicious repositories and MCP servers to steal data and enable software supply chain attacks.

The Silent Ransom Group poses as IT support in attacks against law firms, and sends an individual in person if remote access ...