Latest News

Google has observed ViewState deserialization attacks leveraging a sample machine key exposed in older deployment guides.

Elevation of privilege flaws in Android Runtime (CVE-2025-48543) and Linux kernel (CVE-2025-38352) have been exploited in targeted attacks.

Co-founded by former MITRE experts, the startup will use the funding to accelerate product innovation and fuel company growth.

Flaw allows attackers to reset and hijack TP-Link TL-WA855RE devices; CISA urges users to retire discontinued extenders.

Chrome's latest release addresses a high-severity use-after-free vulnerability in the V8 JavaScript engine that could be exploited for remote code execution.

Founded in 2022 to help organizations with the secure deployment of generative-AI utilities, Aim emerged from stealth in January 2024.

Known for her seminal book, A Hacker Manifesto, Wark reframes hacking as a cultural force rooted in play, creativity, and human nature.

Attack disrupted email, phones, and websites for weeks, but officials say no ransom was paid.

The automotive company said it disconnected its systems, which severely impacted both retail and manufacturing operations.

Hackers accessed customer contact information and case data from Salesforce instances at Cloudflare, Palo Alto Networks, and Zscaler.

Tracked as CVE-2025-57819 (CVSS score of 10/10), the bug is described as an insufficient sanitization of user-supplied data.

Part of a wave of DDoS attacks that lasted for weeks, the assault was a UDP flood, originating from several IoT and cloud providers.

The transaction is valued up to $150 million, including performance-based retention awards, a Varonis spokesperson told SecurityWeek.

The Midnight Blizzard cyberspies used compromised websites to trick users into authorizing devices they controlled.

The vulnerability (CVE-2025-55177) was exploited along an iOS/macOS zero-day in suspected spyware attacks.