Bank of America announced plans to acquire UK-based information security consultancy MDSec Consulting Limited. MDSec provides technical information security consulting services and employs roughly 65 ...

The first exploitation attempts targeting CVE-2026-71362 were observed shortly after Adobe released patches. “Sansec reviewed the patch and confirmed that the vulnerability lets attackers switch a ...

WordPress on Wednesday announced patches for a high-severity vulnerability that allows authenticated attackers to execute arbitrary code remotely. Tracked as CVE-2026-65640 (CVSS score of 8.8), the ...

Israel-based venture fund Team8 announced this week that it has secured $365 million in additional capital. The company says $265 million is for Team8 Capital’s third fund, while $100 million will be ...

Fortinet has patched eight vulnerabilities, including high-severity authentication bugs in FortiWeb and FortiManager.

Contracts may require a $1 million bond, which will be forfeited if a company fails to comply with operational requirements. A presidential memorandum issued on Wednesday expands federal capabilities ...

Hackers are exploiting CVE-2026–59310, a critical vulnerability in VMware vCenter that leads to arbitrary code execution.

Nightmare Eclipse has dropped ShieldBreak, a Windows zero-day exploit that allows any user to gain System privileges.

SharePoint vulnerability CVE-2026-55040 is now being exploited in the wild, with the attacks starting shortly after the release of a PoC ...

AI security firm Mindgard has raised $30 million in Series A funding to scale product, engineering, sales, and marketing teams.

WhatsApp unveils Scam Alert, an optional feature that uses an on-device machine learning model to flag suspicious messages from non-contacts.

Stealthy City-Forum attacks use a custom toolset to exploit guest access and extract exposed data from Salesforce and ServiceNow environments.