LATEST

Red Hat has identified and disclosed a significant privilege escalation flaw, labeled CVE-2026-10090, impacting the Application Subscription controller.

Discover how Cybercriminals are leveraging phishing emails to infiltrate Microsoft 365 accounts and search for payroll-related files. Ref id: [random.

A new "Pass-the-Passkey" family of attack techniques showcases how systemic implementation flaws in WebAuthn can compromise passkey security, even when.

OpenAI has expanded its Daybreak program to provide more extensive access to frontier AI models for vetted cybersecurity defenders This article explores.

A novel "Ghostjacking" attack technique has been identified, enabling attackers to manipulate and control AI-driven coding agents via subtle manipulation.

Security researchers have discovered a new modular remote access trojan called Abyssos, an advanced C++ malware family that grants attackers extensive.

Cisco has revealed multiple high-severity vulnerabilities in ClamAV that could disrupt antivirus scans and cause denial-of-service conditions This article.

Mozilla has rotated and revoked an unauthorized GPG key used in Firefox and Thunderbird release artifacts after unencrypted copies of the previous key.

A malicious tool server can quietly steal SSH keys, environment secrets, source code, and customer data without sending any obvious harmful instructions.

A supply chain breach involving LiteLLM underscores how a fleeting malicious package can lead to long-term vulnerabilities across cloud environments.