A ClickFix campaign has shifted from tricking users into running commands on their computers to persuading them to inject ...

It is “the first zero-click worm to spread through WeChat calls across iOS and Android,” Calif researchers claimed in a disclosure report dated September 8. They tested the tool on several test phones ...

Group-IB said in research published on September 9 that Gigabud was being paired with Vwork, a weaponized fork of the open-source Android cloning app Shelter. It attributed both to GoldFactory, ...

Compromised non-human identities (NHIs) including AI agents are nearly twice as likely to be a primary entry point into the enterprise than phishing, a new study from SpyCloud has claimed.

Microsoft has announced fixes for a record 974 CVEs in its September 2026 Patch Tuesday release. The number of flaws included in this month’s update shatters the previous record for Patch Tuesday, ...

Cheryl Martin argues that experienced cyber professionals have a duty to provide opportunities for young people in the sector ...

Over 10,000 internet-facing SAP systems might be vulnerable to a maximum severity vulnerability in the SAP kernel, security vendor Onapsis has warned. The firm’s Onapsis Research Labs (ORL) discovered ...

After a major cyber-attack targeted France's national tax authority, the Prime Minister called for the establishment of a new dedicated unit ...

Grindr has agreed to pay £26m ($35.2m) to settle a UK group action over allegations that it unlawfully processed users' ...

Google warned that the rapid integration of AI-assisted coding tools has significantly expanded software supply chain risks ...

Cryptocurrency wallet manufacturer Trezor has revealed that a breach at a key shipping partner has affected 67,000 more ...

Security researchers have uncovered a new phishing-as-a-service (PhaaS) operation which they claim has already exfiltrated ...