F5 BIG-IP malware injects a PHP web shell into memory, leaving targeted scripts unchanged on disk while commands run through ...

Infostealer logs expose replayable AI session tokens and API keys that can bypass login controls and enable unauthorized account access.

Cybersecurity companies Volexity and Proofpoint have been acknowledged for reporting CVE-2026-85880, while Romain Deperne, an ...

Slim Spider attacks Brazilian financial firms, stealing cloud credentials and crypto custody secrets while targeting Pix ...

Alby warns a critical Hub flaw could let attackers take over internet-exposed wallets; versions 1.19.0 and later are not affected.

Panel patched CVE-2026-67401, which lets a hosting account with mail privileges create files anywhere and run code as root.

CISA added actively exploited N-able N-central CVE-2026-86218 to KEV, with federal agencies ordered to patch by September 11.

A Microsoft Defender patch bypass PoC demonstrates arbitrary file read as SYSTEM on the latest Windows version.

A WeChat worm demo took over iPhone and Android accounts through incoming calls from existing contacts; Calif says Tencent ...

"BengalSEO used backlinks, DOM injection, DOM shuffling, and keyword stuffing to enable their operation through Black Hat SEO ...

Grindr will pay £26 million to settle a U.K. lawsuit alleging pre-2020 sharing of users' personal data, including HIV status.

Liquid received 3,400 bitcoin back after nearly 4,000 BTC was taken; 598.5 BTC remains unreturned and the network is still paused.