Hackers injected malware into the Rank Math PRO WordPress plugin packages distributed between October 15 and October 16.

Plex Media Server installations face in-the-wild exploitation via Plex2Shell exploit chain delivering cryptocurrency miners ...

A new variant of the ClickFix attack evades detection by instructing victims to use Windows Terminal instead of the Run dialog, Microsoft warns. Like traditional ClickFix attacks, the campaign relies ...

Drupal has rolled out patches for five vulnerabilities, including two critical-severity bugs that could be exploited for remote code execution (RCE). The first resides in the Enti ...

State-sponsored attackers exploited Fortinet vulnerabilities to deploy PeerStitch against a telecommunications organization.

Siemens confirmed in-the-wild exploitation of CVE-2026-110936, a DLL side-loading flaw in Software Center, in ClickFix malware attacks.

Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.

Anthropic has acquired Opaque, a company that turned its confidential computing research into technology used in production ...

ConnectWise is scrambling to restore its Cloud Backup, SaaS Security, and Cloud Management services after hackers abused a compromised credential to access customers’ M365 tenants. The company ...

MITRE released ATT&CK v20 with new techniques covering AI prompt injection, MFA bypass, and water utility breaches across Enterprise and OT.

CyberSN’s jobs report shows US cybersecurity job postings fell 26% in January–September 2026, while AI Security Engineer ...

Citizen Lab has uncovered AdFection, an operation delivering Candiru spyware via malicious ads, in zero-click attacks.