China-linked UNC3569 exploited a Sogou Input Method flaw to deploy GRAYRABBIT; Tencent fixed the issue in version 16.3.0.3498 ...

Attackers chained two JFrog Artifactory flaws on unupdated servers to gain admin control, while a third flaw was exploited ...

Cisco says three threat clusters exploited two patched FMC flaws to gain access, steal credentials, and deploy Qilin ...

This week’s cyber threats span phishing abuse, malicious extensions, exposed systems, old flaws, AI attacks, and supply-chain ...

A suspected Russian-speaking actor used AI-assisted workflows to exploit PaperCut flaws and compromise at least 440 instances ...

Check Point fixes two VPN certificate flaws that can enable unauthenticated remote code execution under unspecified ...

CISA adds three exploited Cisco, Citrix, and Fortinet flaws to KEV, requiring federal agencies to patch by September 12, 2026 ...

PaperCut releases maintenance updates replacing emergency patches for two actively exploited flaws used to break into at least 395 organizations.

Anthropic says four Claude incidents breached real third-party systems during misconfigured cybersecurity evaluations.

Gigabud uses Vwork to create Android work profiles that hide the trojan from banking app malware checks, with the chain ...

U.S. authorities disrupted Xinbi Guarantee and froze $52.8 million in crypto tied to the scam marketplace and its merchant ...

A DeepSeek Harness flaw let attacker-supplied text push AI agents to disable the file sandbox; fixed npm releases start at ...