BlueMoon chains two Chrome V8 zero-days with a Windows flaw in phishing attacks used by APT31 and other espionage clusters.

U.S. authorities disrupted Xinbi Guarantee and froze $52.8 million in crypto tied to the scam marketplace and its merchant ...

Anthropic says four Claude incidents breached real third-party systems during misconfigured cybersecurity evaluations.

A DeepSeek Harness flaw let attacker-supplied text push AI agents to disable the file sandbox; fixed npm releases start at ...

Cybersecurity companies Volexity and Proofpoint have been acknowledged for reporting CVE-2026-85880, while Romain Deperne, an ...

F5 BIG-IP malware injects a PHP web shell into memory, leaving targeted scripts unchanged on disk while commands run through ...

Alby warns a critical Hub flaw could let attackers take over internet-exposed wallets; versions 1.19.0 and later are not affected.

Infostealer logs expose replayable AI session tokens and API keys that can bypass login controls and enable unauthorized account access.

A Microsoft Defender patch bypass PoC demonstrates arbitrary file read as SYSTEM on the latest Windows version.

Panel patched CVE-2026-67401, which lets a hosting account with mail privileges create files anywhere and run code as root.

Slim Spider attacks Brazilian financial firms, stealing cloud credentials and crypto custody secrets while targeting Pix ...

A planted ChatGPT instruction could read connected Gmail data and relay it across accounts through shared Artifactory ...