MetaMask Security Incident Prompts Exit of Affected Ethereum Validators
MetaMask on Thursday said it's responding to what it describ…
MetaMask on Thursday said it's responding to what it describ…
Threat actors have been observed exploiting a critical pre-authe…
Microsoft has warned of phishing campaigns distributing an insta…
A High-severity OpenSSL flaw can leak heap memory to the other s…
Cybersecurity researchers have disclosed technical details of a …
Russian state hackers known as Star Blizzard have been using fak…
Hackers have used a malware family called NeedyMantis to maintai…
RatHat's operators build and publish the Android banking tro…
Cybersecurity researchers have disclosed details of a new botnet…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA)…
Two new unpatched zero-day vulnerabilities in Citrix NetScaler A…
The Psychedelic Stealer malware distributed via compromised Ukra…
The way we talk about AI agents is shifting, and the way we impl…
Kiteworks (formerly Accellion) is urging customers to shut down …
The U.S. Cybersecurity and Infrastructure Security Agency (CISA)…
This week, the dangerous stuff keeps arriving dressed as somethi…
Threat actors have begun to actively exploit a critical security…
Cybersecurity researchers have disclosed Go-based malware distri…
The private email address GitLab gives you for filing issues by …
Cybersecurity researchers have disclosed details of a malicious …
A zero-day proof-of-concept tool that stops Microsoft Defender f…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA)…
Google has been fined €403 million for breaking the EU's dat…
Cybersecurity researchers have disclosed details of a new campai…
Threat actors are leveraging ClickFix-like lures to deliver a pr…
The North Korean threat actor known as Jade Sleet has been attri…
An attacker copied about 170 of CrowdSec's private GitHub re…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA)…
A security researcher has released working exploit code for four…
WordPress today released patches to fix a new set of vulnerabili…
The Iran-linked "hacktivist" persona known as Handala …
The U.S. Department of Justice (DoJ) on Tuesday announced the co…
A critical security flaw in WSO2 API Manager has come under acti…
Cybersecurity researchers have shed light on a previously undocu…
Cybersecurity agencies in the United States, the United Kingdom,…
A Chinese threat actor has been attributed to a spear-phishing c…
A flaw in Telegram Desktop let a bot's message plant hidden …
WordPress has announced it's launching an automated security…
AI keeps showing up in the wrong places. Attackers are using it …
There's a lot of noise around AI and cybersecurity right now…
A malicious cross-store Twitch browser extension has leaked OAut…
Microsoft has disclosed details of two campaigns in which threat…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA)…
Over the past year, we watched a new class of alert appear in en…
The "major malicious attack" that targeted RubyGems in…
Cisco has revealed that three distinct threat clusters linked to…
A lot of this week’s security news has the same awkward answer t…
Anthropic on Wednesday disclosed a fourth incident in which its …
Multiple espionage-motivated threat activity clusters have been …
SAP has released security updates to address multiple vulnerabil…
Microsoft on Tuesday broke Patch Tuesday records by addressing a…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA)…
Cybersecurity researchers have disclosed details of a sprawling …
Online dating app Grindr has opted to pay £26 million ($35.1 mil…
Cybersecurity researchers have disclosed details of a complex Ch…
Cybersecurity researchers have disclosed details of worm-like ac…
A TantoSec proof-of-concept turns an AES-CBC "padding oracl…
Every on-premises N-central build below 2026.3.1.14 — including …
Cybersecurity researchers have unpacked JSCeal, a sophisticated …
Elastic Security Labs has documented four previously unreported …
Attackers are exploiting a new unpatched vulnerability in Magent…
Broadcom has released security updates for two security flaws im…
Hardware wallet manufacturer Trezor on Friday disclosed that ano…
A group of AI safety researchers says a fleet of autonomous agen…
Threat actors are exploiting the newly disclosed PaperCut flaws …
OpenAI on Thursday officially unveiled GPT‑6 Astra, which it des…
The worst part is how normal these attacks look. A call from IT.…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA)…
Google on Wednesday announced Gemini 3.8 Flash Cyber, which it d…
An active malware campaign is using bogus software-download webs…
The U.S. Department of Justice (DoJ) on Tuesday announced the ta…
Threat actors are exploiting a newly patched critical security f…
Brazilian financial services, retail, and e-commerce organizatio…
METR (short for Model Evaluation and Threat Research and pronoun…
Cybersecurity researchers have disclosed a new technique dubbed …
Threat actors are exploiting two critical flaws impacting Langfl…