Cybersecurity authorities in the United States and South Korea have issued a warning about an active Gunra ransomware campaign targeting organizations across critical infrastructure and other...
Valve Corporation has begun notifying European customers who recently ordered Steam hardware that their personal delivery information was likely compromised in a cyberattack on the company’s shipping...
Levi Strauss & Co., the iconic American apparel company best known for its Levi's denim brand, has disclosed a cybersecurity incident in which attackers used social engineering techniques to...
A maximum-severity security vulnerability in Metabase, the popular open-source business intelligence and data visualization platform, was exploited as a zero-day starting around August 3, 2026. The...
Security teams worldwide are racing to secure their environments after the United States Cybersecurity and Infrastructure Security Agency added a severe vulnerability in IBM Langflow to its Known...
The releases were signed. The provenance was valid. The code was still malware. A self-propagating npm worm tracked as ChainDrop tore through the JavaScript ecosystem on August 4, 2026, compromising...
The credentials were already inside the firewall manager. Attackers only needed to know how to use them. Cisco has confirmed active exploitation of CVE-2026-20316, a static-credential...
A routine database-management action became a path to the most powerful identity in the database. cPanel has patched CVE-2026-58048, a critical flaw that allows an authenticated hosting customer with...
Passkeys have been widely promoted as the long-awaited successor to passwords. They promise phishing-resistant authentication through public-key cryptography, device-bound credentials, and biometric...
Edge appliances have become the preferred front door for ransomware operators, and SonicWall's SMA1000 platform is the latest reminder why. Security researchers have linked the INC Ransomware group...
Some vulnerabilities compromise a server. Others compromise an entire customer base. CVE-2026-18577 falls firmly into the second category. The actively exploited authentication bypass in N-able's...
Amgen Inc., one of the world’s leading biotechnology companies, has publicly disclosed a material cybersecurity incident that involved unauthorized access to data stored in cloud environments managed...
In a sophisticated cyber espionage campaign, the Russia aligned threat group known as TA488 has leveraged a cross site scripting vulnerability in Microsoft Outlook Web Access to achieve long term...
A critical remote code execution vulnerability in the widely used FastJson Java library is being actively exploited in the wild, targeting organizations across the United States. Security researchers...
What began as a production disruption has now escalated into a confirmed data breach. The Coca-Cola Company has acknowledged that cybercriminals stole data during the ransomware attack that targeted...
Healthcare organizations continue to pay the price for attacks against third-party service providers. Medical Computer Business Services (MCBS), a revenue cycle management and medical billing company...
Critical vulnerabilities rarely remain theoretical for long, and CVE-2026-6875 has already crossed that line. Days after public disclosure, threat intelligence researchers confirmed active...
Identity has become the new battleground, and the latest research targeting Meta's authentication ecosystem reinforces why. A newly disclosed chain of critical vulnerabilities demonstrates how...
ShinyHunters is a well-known cyber extortion collective responsible for some of the largest data leaks in recent years. The group has repeatedly targeted major corporations and organizations,...
One of Australia's largest energy retailers, Origin Energy, has confirmed a significant cybersecurity incident involving unauthorized access to customer data. The breach has raised serious concerns...