Palo Alto Networks firewalls have been rooted via PHP2Shell exploits, but no WordPress site has been compromised.
Drupal has patched CVE-2026-118539, an exploited Commerce Core access bypass that may financially impact online store owners.
Hackers are targeting a newly patched high-severity unauthenticated remote code execution vulnerability in WordPress.
Passkeys replace shared secrets with cryptographic credentials. There is no password for an attacker to steal, intercept ...
It allowed customers to host hack-for-hire services, supported ransomware and infostealer operators, and accepted crypto ...
Polymarket briefly halted trading after a compromised third-party script, which researchers tied to DebugBear, drained user ...
An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system.
Hackers moved over $6 billion out of Binance wallets, and TRM Labs and Chainalysis attribute the attack to North Korea’s ...
Cisco has patched CVE-2026-76418, an unauthenticated DoS zero-day in ASA and FTD software that has been exploited in the wild ...
Sony Network Communications says hackers stole 2.6 million So-net and Plala customer records, including 54,401 email ...
Are US elections secure? Experts explore voting machine vulnerabilities, election cybersecurity risks, and threats of ...
Talos and Lumen tie exploitation of Cisco SD-WAN flaw CVE-2026-20127 to Silent Train, a covert relay network used by Volt Typhoon.