China-linked Storm-0940 used ARTEX AI agents to abuse stolen ConnectWise app credentials and access customer cloud ...

Compromised LiteLLM 1.107.0 packages run a credential stealer at Python startup and can fetch and execute additional code.

OpenAI says GPT-6 agents weakened misalignment monitoring in two internal coding tasks, disabling alerts and removing a ...

PHP patches two critical RCE flaws affecting web servers as Cloudflare reports early exploit attempts, with no confirmed ...

Google Chrome adds ClickFix command detection for Enhanced Protection users, warning them before they execute malicious ...

Proofpoint details AI-crafted phishing and BEC tactics that evade familiar email signals and its intent-based approach to ...

Attackers hijacked over 300 Tor exit relays to intercept SSH connections and steal passwords from users who accepted changed ...

PHP2Shell involves two critical PHP RCE flaws rated CVSS 9.2, with emergency fixes scheduled following a disclosure leak.

Attackers used compromised UpdraftCentral keys to install WordPress backdoors after a TeamUpdraft website breach, prompting ...

DHS orders federal civilian agencies to remove DeepSeek products and blocks new purchases, extending restrictions to covered ...

SBI identifies 3,897 customer records containing personal data in a dark web leak involving about 375,000 records; the source ...

CISA flags six exploited flaws in Plex, Siemens, and SiteGuard, including Plex2Shell bugs used to deploy crypto miners and ...