CYBERSECURITY

A person made a mistake that let the source code for Anthropic's Claude Code get out This article explores leaked code codebase. . There are almost 2,000.

TeamPCP is using the results of its many supply chain attacks as weapons by using stolen credentials to get into cloud and software-as-a-service (SaaS).

Companies can build, deploy, and manage AI-powered apps on Google Cloud's Vertex AI platform. Palo Alto Networks says that too many default permissions.

Google gives all Android developers the ability to verify their apps This article explores apps outside google. . This news comes before a planned.

Discover how A serious security hole in the TrueConf client video conferencing software has been used in the wild as a zero-day. The vulnerability in.

Chris Wallis, the founder and CEO of Intruder, explains why organizations are still at risk when they only use CVEs This article explores vulnerabilities.

Iran is hiring Russian hackers and working with other groups in creative ways that make it hard to tell the difference between state and criminal cyber.

AI is changing phishing in a big way, making it an ongoing, automatic process instead of a manual one. Attacks are now "highly contextual," which means.

Gareth Maclachlan is the COO of Gigamon This article explores gigamon future cyber. . He says that attackers can now make phishing campaigns that are very.

Amit Sinha is the CEO and a board member of DigiCert This article explores amit sinha ceo. . Sinha says that the coming together of AI and quantum.

Palo Alto Networks Unit 42 has found a security "blind spot" in Google Cloud's Vertex AI platform This article explores security holes google. . An.

The world of cybersecurity is moving faster than ever before This article explores use ai plextrac. . From nation-states to high-tech criminal.

Discover how An active campaign uses typosquatted domains that look like trusted software brands to target Chinese-speaking users. The operation includes.

There has been a supply chain attack on Axios, a popular HTTP client This article explores node js malware. . Two new versions of the npm package added a.

Researchers have found a new type of malware that can steal credentials as soon as it gets onto a victim's network This article explores reliquest looked.

For four years in a row, ransomware groups went after manufacturing the most This article explores passwords safe uses. . Both have environments full of.

A flaw in OpenAI ChatGPT that had never been found before let sensitive conversation data be stolen without the user's knowledge or permission This.

Discover how A new campaign has used the ClickFix social engineering trick to spread a malware loader that had not been seen before. The loader, on the.

People are actively taking advantage of a serious security hole in Citrix NetScaler This article explores risks national cyber. . The FBI said that.

In a lot of SOCs, the threat isn't the only thing that causes the most delays This article explores soc threat visibility. . They happen because of broken.

Secrets sprawl isn't slowing down: in 2025, it sped up faster than most security teams thought it would This article explores secrets gitguardian sprawl.

Discover how Researchers at Censys have found a remote access toolkit that came from Russia. Malicious Windows shortcut (LNK) files that look like private.

Three groups of threat actors linked to China have gone after a government agency in Southeast Asia This article explores clusters threat group. . HIUPAN.

Discover how Iran's Ministry of Intelligence and Security is thought to have created the hacktivist persona Handala Hack, which is pro-Iranian and.

Citrix NetScaler ADC and Gateway versions 14.1 and 13.1 are both vulnerable. The vulnerability, CVE-2026-3055, is a case of not checking input properly.

A Russian government-backed threat group is using the DarkSword exploit kit to attack iOS devices. The group is known for spear-phishing campaigns that.

The U.S This article explores vulnerabilities kev cve. . Cybersecurity and Infrastructure Security Agency (CISA) added a serious security hole to its list.

Coruna is a high-quality mobile exploit kit that has zero-day vulnerabilities for high-level spying This article explores darksword tier ios. . It turns.

Apple is now sending Lock Screen notifications to iPhones and iPads that are running older versions of iOS and iPadOS. The alerts let people know about.

Reports say that Israel and the US took over Iran's network of traffic cameras to keep an eye on the movements of Iranian leader Ayatollah Ali Khamenei.