Eduard Kovacs

CVE-2026-0073 affects Android’s System component and it can be exploited without any user interaction. 

The vulnerabilities were reported to Meta through its bug bounty program and were patched with updates released earlier this year.

The cybersecurity firm’s investigation has not found any impact on its source code release or distribution process. 

Significant cybersecurity M&A deals announced by Airbus, Cyera, Fortra, Palo Alto Networks, Silverfort, and Socket.

Advanced Account Security provides stronger login methods, more secure account recovery, shorter sessions, and training exclusion.

The maximum reward for a zero-click Pixel Titan M exploit with persistence has increased to $1.5 million.

Ryan Goldberg of Georgia and Kevin Martin of Texas were each sentenced to four years in prison. 

The new kit aims to address risks related to poisoned models, regulatory issues, supply chain integrity, and incident response.

A new alert from the FBI says criminal enterprises are hacking both brokers and carriers to steal cargo for resale.

An attacker could have planted a malicious configuration to execute commands outside the sandbox.

Claroty researchers discovered two vulnerabilities that can be exploited for security bypass and remote code execution.

It took the healthcare organization nearly one year to publicly disclose a data breach after it was targeted by Inc Ransom.

Forescout has identified tens of thousands of exposed RDP and VNC servers that can be mapped to specific industries.

Some of the vulnerabilities discovered by Aisle can be exploited to access and alter sensitive patient information.

The remote code execution flaw CVE-2026-3854 was found to impact GitHub.com and GitHub Enterprise Server.

The ShinyHunters group is threatening to leak stolen files unless Vimeo agrees to pay a ransom.

Legitimate-looking emails coming from Robinhood systems lured recipients to phishing websites.

Vulnerabilities in Zero Motorcycles electric motorcycles and Yadea electric scooters can pose physical security and safety risks.

The ShinyHunters cybercrime group claimed to have stolen 9 million records containing personal information from Medtronic.

The tech giant found that many indirect prompt injection attempts are harmless, but some malicious exploits have also been identified.