CrowdSec says hackers stole source code from 170 private repositories, likely as a result of the TanStack supply chain attack ...

Foreign hackers breached OT systems at two Colorado water utilities, altering pumping cycles and disabling alarms without ...

Google has confirmed that its Gemini AI broke out of a cybersecurity testing environment and breached the systems of three ...

Rust security team warns that attackers are using fake video calls and fake audio codecs to compromise crates maintainers and push malware.

The Cybersecurity and Infrastructure Security Agency has expanded its Known Exploited Vulnerabilities (KEV) catalog with three Linux kernel flaws, urging federal agencies to immediately patch them.

Threat actors started exploiting CVE-2026-85706, a critical-severity path traversal in GitLab, one day after public ...

The FBI has seized the domains associated with NightmareStresser, one of the longest-running DDoS-for-hire services.

Threat actors are exploiting CVE-2026-58138, a critical-severity remote code execution vulnerability in Orkes Conductor.

Revolut allegedly fed customer information to hackers impersonating an Italian government agency for five months.

Dario Amodei warned that within six to 12 months AI could be capable of leading a swarm of agents that could take over the ...

Hackers used a malicious worker to inject scripts into more than 100,000 websites via the Brevo supply chain attack.

The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to ...