Noteworthy stories that might have slipped under the radar: government AI platform deal sparks outrage, North Korean IT worker breaches federal agency, DEF CON attendee blamed for Delta flight ...

Most of the 2,500 organizations believed to have been affected by the LiteLLM supply chain attack were actually exposed before, SOCRadar reports. The compromise was blamed on and claimed by TeamPCP, ...

Google Cloud outlines its roadmap to full post-quantum cryptography readiness by 2029, with key milestones targeted for 2027 ...

The personal information of 1.6 million individuals appears to have been stolen from the widely used business communications platform RingCentral by a notorious extortion group. The incident occurred ...

The root cause of the incident is believed to be a compromised AWS access key that was exposed in publicly available JavaScript build artifacts. UK-based customer relationship management (CRM) ...

Threat actors started exploiting an unpatched zero-day vulnerability in GeoServer hours after it was publicly disclosed, attack surface management firm WatchTowr says. The security defect, described ...

Bank of America announced plans to acquire UK-based information security consultancy MDSec Consulting Limited. MDSec provides technical information security consulting services and employs roughly 65 ...

The first exploitation attempts targeting CVE-2026-71362 were observed shortly after Adobe released patches. The vulnerability impacts all Commerce, Commerce B2B, and Magento Open Source versions up ...

WordPress has patched CVE-2026-65640, a high-severity vulnerability that allows authenticated attackers to execute arbitrary code.

Israel-based venture fund Team8 announced this week that it has secured $365 million in additional capital. The company says $265 million is for Team8 Capital’s third fund, while $100 million will be ...

Fortinet has patched eight vulnerabilities, including high-severity authentication bugs in FortiWeb and FortiManager.

White House directive allows vetted private companies to conduct offensive cyber operations against foreign cybercrime organizations.