A trio of critical vulnerabilities in the Chaos-Mesh platform allow in-cluster attackers to run arbitrary code, even in ...

Microsoft revealed it has seized 338 websites associated with RaccoonO365, a phishing kit which has stolen at least 5000 ...

For security leaders and development executives, vibe coding represents a strategic risk that requires proactive governance ...

British and American cybersecurity leaders are increasingly concerned about their expanding AI attack surface, particularly ...

The bundle.js script is designed to steal npm, GitHub, AWS and GCP tokens. But it also installs TruffleHog – an open source ...

An employee of outsourcing firm TaskUs allegedly sold data stolen during the Coinbase data breach to hackers for $200 per record before her arrest in January 2025 ...

Fifteen well-known ransomware groups, including Scattered Spider, ShinyHunters and Lapsus$, have announced that they are ...

The attack, which is linked to ShinyHunters, has reportedly compromised data relating to 7.4 million unique email addresses ...

The incident at FinWise Bank occurred on May 31 2024, but wasn’t discovered until over a year later, on June 18 2025, ...

Jaguar Land Rover (JLR) has confirmed that its pause in production will last until at least Wednesday, September 24 ...

The firm’s Imperva business analyzed data from over 4000 environments worldwide to produce its API Threat Report (H1 2025).

AI-native Villager, which automates Kali and DeepSeek penetration tests, has reached 11,000 PyPI downloads fueling dual-use ...