CISA flags six exploited flaws in Plex, Siemens, and SiteGuard, including Plex2Shell bugs used to deploy crypto miners and ...

PHP2Shell involves two critical PHP RCE flaws rated CVSS 9.2, with emergency fixes scheduled following a disclosure leak.

Belarus-aligned Cyber Partisans maintained access to a Russian healthcare network for nearly two years, hiding Vasilek ...

Eight eMudhra CA keys were compromised, prompting browser blocks and software fixes. Chrome found no rogue certificates in CT ...

Go 1.27.3 and 1.26.10 block eight CA public keys, rejecting certificate chains that use them after applications are rebuilt.

APT28 targeted two NATO states with HOOKEDGE and a new reflective loader, stealing credentials and establishing an SSH tunnel ...

Citizen Lab confirmed Pegasus on a Serbian university rector's iPhone and flagged likely spyware targeting of a prosecutor ...

ConnectWise suspended Cloud Backup after unauthorized access to application identities; Huntress observed app backdoors in ...

Attackers replaced OVHcloud CLI downloads across five GitHub releases with secret-stealing builds for up to 94 minutes on ...

Qilin and INC ransomware actors continue exploiting a patched Palo Alto Networks flaw to gain network access, bypass MFA, and ...

Researchers release a PoC for critical FortiSIEM flaw CVE-2026-106173, showing how unauthenticated attackers can achieve ...

Employee-built AI apps and agents can expose sensitive data through excessive permissions, making runtime controls and ...