Tor exit relays hijacked, banks spot rogue AI agents in customer accounts, and researcher analyzes Heartbreaker macOS ransomware.

Mirai botnet operators target PHP2Shell and VulnCheck bypasses ASLR, yet no successful PHP2Shell compromise has been ...

China-linked Storm-0940 used Artex in AI-powered attacks targeting hundreds of organizations in a recent ConnectWise campaign.

Arista has patched CVE-2026-114625, a critical SQL injection flaw in VeloCloud Orchestrator exploited as a zero-day.

Capcom says hackers stole 11 million email addresses from CAPCOM ID and changed the passwords for 196 accounts.

Quest Diagnostics said it learned of a cyber breach of one of its systems this week, likely compromising some records for patients.

LiteLLM was compromised in a fresh supply chain attack, and malicious packages were served to its users on both PyPI and ...

Atlassian’s October 2026 security bulletin addresses 75 unique CVEs in third-party components used by its Data Center and ...

Semperis says Iran’s Prince of Persia APT hosted a C&C server in the US for the first time since 2016 after a record ...

Amsterdam-based industrial cybersecurity firm Indurex has raised €7 million in funding to fuel expansion and product ...

CVE-2026-113380, a vulnerability in Signal’s call library RingRTC, prevented calls from ending, leaving audio and video ...

Cisco, Palo Alto Networks, Fortinet, Red Hat and others have published PHP2Shell advisories as governments urge immediate patching.