Microsoft has patched 18 vulnerabilities in AI and cloud products such as Copilot, Azure, Dataverse, and Fabric.

Hackers used a malicious worker to inject scripts into more than 100,000 websites via the Brevo supply chain attack.

The FBI has seized the domains associated with NightmareStresser, one of the longest-running DDoS-for-hire services.

Threat actors are exploiting CVE-2026-58138, a critical-severity remote code execution vulnerability in Orkes Conductor.

MIND has raised $72 million in Series B funding to accelerate product development and expand enterprise market presence.

To demonstrate the access without reading any internal code, Hacktron says it took over an OpenAI employee’s account whose Codex integration was linked to OpenAI’s GitHub organization, then used it to ...

Ransomware developer sentenced to prison on Switzerland, Plugin4Shell attack targets AI coders, organizations warned of SAP flaw.

Security firms Check Point, Kaspersky, and Tanium have each patched severe vulnerabilities in their products, including RCE flaws.

Gyazo has suffered a data breach that exposed the records of 23 million users, along with 490 million image metadata records.

The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to ...

Cisco has patched an exploited Identity Services Engine zero-day authentication bypass vulnerability tracked as ...

Cisco has patched dozens of FMC, ISE, and Nexus Dashboard vulnerabilities, including three flaws already publicly disclosed.