Five Venezuelan nationals admitted in a US court to ATM jackpotting attempts using physically installed malware.

Tracked as CVE-2026-0768, the security defect allows unauthenticated attackers to execute arbitrary Python code remotely.

Exploitation of the JFrog Artifactory authentication bypass vulnerability CVE-2026-82329 started just days after its public ...

Hackers stole the personal and health information of over 9.5 million people from Aesto Health’s AWS infrastructure.

Three critical issues in the Fireware OS iked process could allow unauthenticated attackers to execute arbitrary code ...

Nutex Health says personal and business information was stolen in a data breach claimed by The Gentlemen ransomware group.

The cybersecurity agency CISA added CVE-2026-82078 and CVE-2026-81578 to its Known Exploited Vulnerabilities (KEV) catalog on ...

Researchers used AI to port an RCE exploit between WAGO PLCs, but the process took hours and ultimately bricked the device.

Nightmare Eclipse has dropped a zero-day targeting a privilege escalation vulnerability in a Kaspersky endpoint security ...

AI agents breached Hugging Face using conventional tactics and stolen credentials. What security leaders must fix in identity ...

McKesson has confirmed a data breach as ShinyHunters claimed the theft of 284 million records, including PII and PHI.

Anthropic is warning Claude AI users about infostealer malware infections that enable attackers to run up victims’ usage ...