A new AI safety study is raising an uncomfortable question for the industry: what happens when advanced models do not just try to preserve themselves, but start protecting each other too? ...
Microsoft Threat Intelligence has warned that Forest Blizzard, a threat actor linked to Russian military intelligence, has been compromising vulnerable home and small-office routers and repurposing...
Hims & Hers is warning customers that a breach of its third-party customer support platform exposed personal information submitted through support tickets, adding another high-profile victim to the...
The React2Shell vulnerability, officially designated as CVE-2025-55182, has emerged as one of the most exploited flaws in modern web development frameworks. With a perfect CVSS score of 10.0, this...
Date: April 2026 A sophisticated cyber campaign attributed to an Iran-linked threat actor has exposed critical vulnerabilities in municipal cloud infrastructure, coinciding with heightened...
A newly disclosed attack technique dubbed GPUBreach has introduced a significant shift in the threat landscape by demonstrating how modern GPUs can be weaponized to achieve full system compromise. By...
Enterprise security has shifted decisively toward real-time detection and response. Traditional antivirus tools are no longer sufficient against modern threats that rely on fileless techniques,...
Check Point Research has disclosed a now-patched vulnerability in ChatGPT that allowed sensitive user data to be silently exfiltrated through DNS resolution, exposing a hidden outbound path inside...
The Axios npm compromise has quickly become one of the most important software supply chain incidents of 2026, not because the attackers poisoned a lookalike package, but because they published...
A cyberattack has temporarily disrupted operations at the Patriot Regional Emergency Communications Center in northern Massachusetts, affecting public-safety computer systems and non-emergency...
On April 1, 2026, Drift Protocol, the leading decentralized perpetual futures exchange on the Solana blockchain, suffered one of the largest exploits in DeFi history. Attackers drained approximately...
The French Ministry of the Interior has confirmed a cybersecurity breach involving the national firearms registration platform known as the Système d’Information sur les Armes or SIA. Hackers gained...
Date: April 2026 A sophisticated supply chain attack attributed to the threat group UNC1069 has exposed critical vulnerabilities in the open-source ecosystem. By targeting the maintainer of the...
Date: April 2026 A recent cybersecurity report dubbed “BrowserGate” has sparked intense debate across the tech and privacy communities. The report alleges that LinkedIn deploys hidden JavaScript...
For much of the past year, the discussion around AI and cybercrime has centered on speed. Microsoft now argues that the more important shift is deeper and more dangerous: threat actors are no longer...
Hasbro Inc. identified unauthorized access to its corporate network on March 28, 2026. The toy manufacturer, known for iconic brands including...
Adobe is being named in an alleged breach after a threat actor claimed to have accessed sensitive internal data, including millions of support tickets, employee records, HackerOne submissions, and...
Security researchers have uncovered a malicious Chrome extension called “ChatGPT Ad Blocker” that masqueraded as a lightweight privacy tool while quietly harvesting users’ full ChatGPT conversation...
Microsoft Threat Intelligence has attributed the recent Axios npm supply chain attack to Sapphire Sleet, a North Korean state actor, after identifying that the malicious package infrastructure and...
McAfee’s mobile research team has disclosed a large-scale Android rootkit campaign dubbed Operation NoVoice that used more than 50 malicious apps on Google Play to infect at least 2.3 million...