Varonis reported the flaw to Google in late 2025 and it has been addressed, but it reminds defenders to take a look at their ...

The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data ...

An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt ...

Attackers wasted little time targeting the latest memory disclosure bug in Citrix NetScaler, after researchers published a ...

A threat group researchers call "Armored Likho" has gained access to government agencies and electrical power entities in ...

After gaining a foothold in 1000s of Fortinet firewalls, attackers are starting to monetize that access, and are also piling ...

Expect more compressed patching cycles from Apple going forward, as attackers leverage artificial intelligence to reduce time ...

IBM and Red Hat launched Project Lightwell with $5 billion to patch open-source vulnerabilities faster than AI can discover ...

Vensure reduced security data costs by $250K annually while improving threat detection through AI-powered log filtering ...

The group compromised at least 10 regional organizations, including two state-owned entities, and deployed a new backdoor.

Attackers don't need any special authentication to reach a target endpoint — they just need to know where it is.

A security analyst at a large enterprise recently found sensitive HR documents being copied into a Microsoft Teams channel ...