Unpatched vulnerabilities in Contec CMS8000 patient monitors expose devices to remote access, file overwrites, and data leaks ...

BeyondTrust breach impacted 17 SaaS customers via compromised API key linked to Silk Typhoon; U.S. Treasury affected.

Meta-owned WhatsApp disrupted a zero-click spyware campaign by Paragon Solutions, targeting 90 journalists and activists.

Malvertising targets Microsoft advertisers via fake Google ads, stealing credentials with phishing pages mimicking ...

Broadcom patches five VMware Aria Operations flaws, including CVE-2025-22218 (CVSS 8.5), preventing credential leaks and ...

Google blocked 2.36M harmful Android apps in 2024, banned 158K developers, and secured 10M devices from 36M risky installs to ...

AI-powered social engineering is on the rise, from deepfake election interference to multimillion-dollar scams.

U.S. and Dutch agencies dismantled 39 domains tied to $3M BEC fraud schemes run by Saim Raza since 2020 in Operation Heart ...

Europol and seven nations seize Cracked, Nulled, Sellix, StarkRDP, disrupting cybercrime and malware networks.

SLAP & FLOP attacks exploit Apple M-series speculative execution flaws, leaking emails, location data, and credit cards via ...

"Using a maliciously crafted URL it's possible to cause the credential request coming from Git to be misinterpreted by Github ...

DeepSeek AI exposed a database containing secret keys, chat logs, and backend data, allowing full system access.