Eduard Kovacs

The Anubis ransomware group claims to have stolen 1 TB of confidential data from the Coca-Cola subsidiary.

OpenAI says its AI models went rogue, as CISOS call the incident a watershed moment, warning that autonomous AI threat models have officially crossed...

A security researcher discovered a broken access control vulnerability in Meta’s support infrastructure.

The ServiceNow AI platform vulnerability tracked as CVE-2026-6875 can be exploited for remote code execution.

The zero-days CVE-2026-15409 and CVE-2026-15410 were exploited by a threat actor tracked by Volexity as UTA0533.

Longtime cybersecurity executive Richard Bird built the resource for security experts, journalists, policymakers, and everyday citizens.

Exploitation of the new WordPress vulnerabilities tracked as CVE-2026-60137 and CVE-2026-63030 started soon after disclosure.

Thalha Jubair and Owen Flowers were prosecuted over a 2024 cyberattack targeting Transport for London (TfL).

The new macOS malware has targeted at least 100 users to steal their passwords and cryptocurrency. 

Chinese cybersecurity firms are facing action from the country’s military, but it’s not due to product or technical failures.

The cybersecurity companies patched critical and high-severity vulnerabilities in some of their products.

The suspects and their companies were previously sanctioned by the United States and its allies.

The new program stems from an AI-focused Executive Order signed by President Trump on June 2.

The industrial giants fixed dozens of vulnerabilities across their ICS products, with advisories also released by CISA and VDE CERT.

SonicWall SMA1000 zero-day vulnerabilities CVE-2026-15409 and CVE-2026-15410 can be exploited for remote code execution.

The D1R cybercrime group claimed to have stolen valuable data from Synopsys and Bosch, threatening to leak it unless a ransom is paid. 

The flaws can be exploited for authentication bypass, remote code execution, privilege escalation, and directory traversal.

A ClaudeBleed-linked vulnerability reportedly persists across eight patches, exposing potentially sensitive data to other extensions. 

A new CMMC review and reform task force will conduct a comprehensive review of the program.

Significant cybersecurity M&A deals announced by 1Password, Accenture, Cisco, F5, Rubrik, and SailPoint.