Hackers have stolen source code and employee information after breaching Meta GitHub repositories using stolen credentials.

Ivanti has patched CVE-2026-104935, a Connect Secure (ICS) zero-day exploit that allows unauthenticated remote code execution ...

Anthropic’s red team says AI worms built on small models may soon be able to spread across poorly secured IoT devices.

IBM’s Steve Wallin explains why the speed and scale of AI-assisted attacks make proactive security, zero trust, resilience ...

Hackers targeted Danfoss refrigeration controllers, setting refrigerators and freezers in hundreds of European supermarkets ...

Grocery giant Ahold Delhaize has taken some systems offline in response to a security incident that targeted its network.

Hackers stole at least $86 million in cryptocurrency using a hardware implant in Ledger signers sold via CryptoBilis.

The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge.

Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated ...

Cybersecurity expert Edward Dubrovsky has been arrested on suspicion of being involved in the ShinyHunters hack against the ...

Canonical’s websites were disrupted last week by a DDoS attack, months after a larger attack hit the Ubuntu maker’s ...

A critical vulnerability in the Bricksforge WordPress plugin, tracked as CVE-2026-85097, has been exploited in the wild.