Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an ...

Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.

A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters," contacting victims before the attacks become public and claiming it can provide decryption keys and ...

Security researchers anticipate a rise in deep-level industrial device attacking capabilities as AI models improve, opening ...

Fire Ant hackers, a China-linked espionage group, hacked Cisco routers and enterprise authentication servers in 2026, ...

Australian authorities have charged two alleged TeamPCP members after software supply chain attacks exposed over 500,000 credentials and at least 300GB of data.

NCC Group's July threat report highlights Jadepuffer, an AI-driven ransomware operation that can carry out much of an attack without a human directing every step. Jadepuffer can change tactics when an ...

This week: a massive breach of U.S. driver's licenses, Dropbox accounts breached, a BGP hijack, Artifactory flaw, Russian ...

Threat actors are actively exploiting two recently disclosed vulnerabilities in PaperCut NG/MF servers, using the access to ...

Suspected Chinese-speaking hackers exploited known vulnerabilities to steal sensitive data from a Philippine nuclear research ...

A suspected Chinese-speaking hacker breached a Philippine nuclear research organization and a marine engineering company that ...

Chinese-speaking hackers exploited ownCloud and WordPress flaws to steal sensitive data from Philippine nuclear and naval ...