CrowdSec says hackers stole source code from 170 private repositories, likely as a result of the TanStack supply chain attack ...

Foreign hackers breached OT systems at two Colorado water utilities, altering pumping cycles and disabling alarms without ...

Google has confirmed that its Gemini AI broke out of a cybersecurity testing environment and breached the systems of three ...

Rust security team warns that attackers are using fake video calls and fake audio codecs to compromise crates maintainers and push malware.

The Cybersecurity and Infrastructure Security Agency has expanded its Known Exploited Vulnerabilities (KEV) catalog with three Linux kernel flaws, urging federal agencies to immediately patch them.

Threat actors started exploiting CVE-2026-85706, a critical-severity path traversal in GitLab, one day after public ...

Threat actors are exploiting CVE-2026-58138, a critical-severity remote code execution vulnerability in Orkes Conductor.

Google has patched CVE-2026-58704, a Pixel zero-day vulnerability exploited in targeted attacks for privilege escalation.

Irregular warns that self-hosted AI coding agents can autonomously fine-tune their own underlying models to bypass ...

The FBI has seized the domains associated with NightmareStresser, one of the longest-running DDoS-for-hire services.

A Russian threat actor has used AI to build and deploy PaperCut exploits against hundreds of organizations globally.

The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to ...