Google has dismantled the 1.3 million-strong XCPE botnet, created and operated by Videostrong Technology, an Android OEM/ODM.

SecurityWeek tracked 37 cybersecurity merger and acquisition (M&A) deals announced by companies in October 2026.

Chainalysis has disclosed a data breach after hackers used offensive agentic techniques to access its systems.

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

Google promises a $250,000 root-in-cloud bug bounty reward for high-impact architectural flaws leading to admin control.

The FBI attributed the Binance hack to North Korea’s TraderTraitor and published over 600 attacker addresses as laundering ...

Hackers breached Revolve’s online shopping platform and stole the personal and payment card information of at least 180,000 people.

DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was ...

The U.K. will likely face AI cyberattacks on its critical infrastructure by 2028 as criminals and states, including China and Russia, increasingly use AI in their cyber activity. The U.K. will likely ...

Ivanti has patched CVE-2026-111357 and CVE-2026-118527, two Connect Secure zero-days chained with CVE-2026-104935 in attacks.

Syrian Electronic Army hacker Ahmad Umar Agha, who hijacked AP’s Twitter account in 2013, gets 42 months after a decade on ...

Talos and Lumen tie exploitation of Cisco SD-WAN flaw CVE-2026-20127 to Silent Train, a covert relay network used by Volt Typhoon.