A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal ...

Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any ...

IBM and Red Hat launch Lightwell to defend open-source code from AI attacks ...

A Linux vulnerability that allows untrusted virtual machines to gain root access to host machines is one of two high-severity ...

Learn how Microsoft uses AI to proactively harden its own cloud services through the Secure Future Initiative (SFI).

Quick ReadAmazon hosts Mythos on AWS while CrowdStrike, Anthropic's Project QuiltWorks partner, is up 70% year to date on the ...

A severe vulnerability has been discovered in React.js, exposing millions of applications worldwide. This exploit, linked to ...

Researchers show HalluSquatting can make AI coding agents fetch fake repositories or skills and run attacker-supplied code.

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered government agencies to patch an actively exploited maximum-severity flaw in the Adobe ColdFusion commercial web app ...

Secret Network proposes moving SCRT to Arbitrum after bridge risks and Cosmos challenges, with migration planned through ...

Crypto security incidents rose 50% in H1 2026 while losses fell 60%, as AI threats grew alongside according to a SlowMist ...