Ransomware developer sentenced to prison on Switzerland, Plugin4Shell attack targets AI coders, organizations warned of SAP flaw.

To demonstrate the access without reading any internal code, Hacktron says it took over an OpenAI employee’s account whose Codex integration was linked to OpenAI’s GitHub organization, then used it to ...

Gyazo has suffered a data breach that exposed the records of 23 million users, along with 490 million image metadata records.

Microsoft has patched 18 vulnerabilities in AI and cloud products such as Copilot, Azure, Dataverse, and Fabric.

The FBI has seized the domains associated with NightmareStresser, one of the longest-running DDoS-for-hire services.

Hackers used a malicious worker to inject scripts into more than 100,000 websites via the Brevo supply chain attack.

Threat actors are exploiting CVE-2026-58138, a critical-severity remote code execution vulnerability in Orkes Conductor.

MIND has raised $72 million in Series B funding to accelerate product development and expand enterprise market presence.

Security firms Check Point, Kaspersky, and Tanium have each patched severe vulnerabilities in their products, including RCE flaws.

The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to ...

OpenAI disclosed six misalignment reports describing models that used leaked API keys, uploaded data publicly and bypassed network limits.

CISA is discontinuing its weekly vulnerability bulletin on September 28 as it instructs agencies to prioritize flaws based on ...