Latest News

OpenAI has expanded its Daybreak cybersecurity initiative with a new suite of tools and partnerships.

Using a custom sniffer, the threat actor has captured over 110 million credentials since at least February 2026.

Hackers stole customers’ names, addresses, email addresses, phone numbers, and account information.

Federal agencies are required to transition high-value assets and high-impact systems to use PQC by the end of 2030 and 2031.

Threat actors gained access to personal and protected health information that Xsolis received from its clients.

Squidbleed, discovered with the aid of Claude Mythos Preview, has been described as a Heartbleed-style vulnerability. 

Vulnerable WordPress plugin iterations leak API keys, secrets, tokens, server information, and other data.

A malicious dependency the attackers added to over 140 Mastra packages fetches a payload targeting cryptocurrency extensions.

Groups like ShinyHunters are demonstrating that attackers do not necessarily need malware or zero-day exploits to cause massive damage.

The vulnerability exploited by the Usbliter8 exploit cannot be patched and a PoC exploit has been released by researchers.

A database of over 86,000 confirmed working credentials was created during the credential-harvesting campaign.

HackerOne, Huntress, Jamf, OneTrust, Recorded Future, Snyk, and Tanium are among the affected Klue customers.

Hackers stole personal information after breaching the systems of a third-party license vendor serving TPWD.

French President Emmanuel Macron urged the world’s wealthy democracies to work together on regulating advanced AI systems.

Other noteworthy stories that might have slipped under the radar: Android TV botnet Popa linked to Israeli firm, Velvet Ant maintained decade-long stealth, unpatched GCP Config Connector flaw enables takeover.