IBM and Red Hat launched Project Lightwell with $5 billion to patch open-source vulnerabilities faster than AI can discover ...

Attackers don't need any special authentication to reach a target endpoint — they just need to know where it is.

The group compromised at least 10 regional organizations, including two state-owned entities, and deployed a new backdoor.

Vensure reduced security data costs by $250K annually while improving threat detection through AI-powered log filtering ...

As AI reshapes cybersecurity workflows, John Paul Cunningham, CISO at SIlverfort, says there are more ways than ever to break ...

Attackers fingerprint victims through user-agent data to deliver OS-specific payloads, increasing compromise rates and campaign profitability.

Researchers say the highly effective social engineering technique is no longer the exception for malware attacks — it's now the rule.

Separate but similar campaigns described by Microsoft and Trend Micro use malicious zip files to spread malware via social ...

LLMs consistently hallucinate Web domains for legitimate brands that attackers can register for malicious activity in a difficult-to-detect attack vector.

The infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp.

One critical vulnerability, among many discovered by a researcher, could have allowed anyone to walk in and take over a ...

Iran, Russia, and China target water systems through weak passwords and exposed PLCs/HMIs, aiming for psychological impact ...