Ionut Arghire

Hacker group published roughly 550GB of data after MAG reportedly refused to pay a ransom demand; the group says it gained access via exposed...

The Austin-based company will invest in agentic runtime security capabilities to secure AI coding agents.

Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.

The high-severity SQL injection flaw (CVE-2026-19949) could allow unauthenticated attackers to achieve remote code execution.

Publicly disclosed S/MIME flaws could expose encrypted email content, while critical IOS XR and Nexus bugs could enable remote code execution and authentication bypass.

The security defect allows remote attackers to bypass authentication through argument bearer manipulation.

Using a technically valid TLS certificate for Softaculous’ domains, a threat actor diverted traffic to fake software updates.

The browser refreshes fix multiple use-after-free, sandbox escape, and privilege escalation bugs.

The shutdown operation involved peer list manipulation and Sality payload URL takedown.

Tracked as CVE-2026-0768, the security defect allows unauthenticated attackers to execute arbitrary Python code remotely.

The defendants unsuccessfully attempted to physically install malware on ATMs to force them to dispense cash.

The company has notified the SEC that hackers accessed patient, employee, provider, business, and financial information.

Hackers stole personal and health information from the healthcare technology company’s AWS infrastructure.

Three critical issues in the Fireware OS iked process could allow unauthenticated attackers to execute arbitrary code remotely.

Attackers could exploit the security defects to execute arbitrary code and access or tamper with data.

The ShinyHunters extortion group has claimed the theft of 284 million records from the company’s systems.

Named KindaRails2Shell, the arbitrary file read flaw allows attackers to extract secrets and execute arbitrary code remotely.

FulcrumSec says it stole over 80 GB of data from Manchester Airports Group and plans to leak it online.

The Rhysida ransomware group has claimed the exfiltration of over 5TB of data, including personal information and credentials.

The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process.