An attacker used 4,837 compromised GitHub accounts to probe 61,764 repositories and deploy a stealer of CI secrets and cloud keys.

Google and Mozilla have released fresh Chrome and Firefox security updates that resolve more than 180 vulnerabilities. The Chrome refresh fixes 83 security defects, including five critical-severity ...

Apache fixed CVE-2026-119618, a critical HTTP/2 flaw reported by Anthropic and Google that could enable unauthenticated code execution.

A critical Red Hat Quay vulnerability allows attackers to access private images, overwrite repositories and compromise ...

N-able has patched several CVEs in N-central dropped as zero-days over the weekend and already targeted in the wild.

Maersk confirms data theft as the WhiteArmor ransomware group claims to have stolen 100GB and demands $5 million.

Asus and Zoom have released security patches for critical- and high-severity vulnerabilities across their products.

Hackers have exploited a vulnerability in the RMM+ extension to compromise ScreenConnect environments and deploy malware.

Microsoft’s October 2026 Patch Tuesday updates fix over 1,000 vulnerabilities, including an exploited Outlook zero-day, ...

N-able has taken N-central offline after a researcher published more than 30 zero-day vulnerabilities on GitHub.

France summoned the Iranian ambassador and said it would seek European sanctions against those responsible for the attack ...