Mudhra plans to exit global SSL/TLS certificates after eight weak CA keys were recovered, as Chrome and Firefox withdraw ...

Critical RCE flaws, stolen credentials, data breaches, phishing scams, AI security risks, and cyber threats you may have ...

A New Mexico court ordered Meta to pay $25 billion over 43 million privacy-related violations linked to the Cambridge ...

Two CVSS 9.0 flaws in Linux KSMBD could enable remote code execution; one needs no authentication, and neither has a mainline ...

INTERPOL's Operation Serengeti III disrupted 10,909 malicious networks, arrested 1,462 suspects, and recovered over $105 ...

Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...

China-linked Storm-0940 used ARTEX AI agents to abuse stolen ConnectWise app credentials and access customer cloud ...

Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...

Railway says an intruder may have accessed decrypted environment variables for some users, as a researcher reports related ...

A patched OpenCode flaw could let malicious MCP servers execute code on Windows and WSL when developers initiated OAuth ...

Amazon detected a PHP2Shell exploit attempt on October 17, before disclosure, followed by further attempts after patches were ...

FoxIO disclosed QPACK flaws in seven HTTP/3 stacks that can cause denial of service through header expansion, with three ...