Threat actors are actively exploiting two newly disclosed remote code execution vulnerabilities affecting Langflow and Ruby on Rails. These campaigns focus on cloud credential theft,…
For years, the security industry has treated vulnerabilities as an endless queue of individual fixes. A recent CISA review argues that this is precisely why…
We’ve seen scam sites built around Grand Theft Auto VI (GTA 6) targeting visitors in three different ways this year. In June, we looked at sites…
Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietnamese movie and comic…
For the past five years, the AI industry has pursued a remarkably simple strategy: build a bigger model. More parameters. More data. More GPUs. The…
The China-nexus espionage group Fire Ant has moved from compromising virtualization platforms to implanting Cisco IOS XR routers and TACACS authentication servers. They are using…
Key points US officials have walked back claims that several government agencies were hacked by Chinese spies, now calling them targets rather than victims. The…
Researchers at Forescout’s Vedere Labs used Anthropic’s Claude to port a working remote code execution (RCE) exploit from one WAGO programmable logic controller (PLC) to…
Attackers Access Aesto Health AWS Infrastructure, Exposing 9.5 Million Records Pierluigi Paganini September 01, 2026 Aesto Health suffered a breach exposing personal and health data…
A report showed that Claude could help hackers develop attack strategies targeting PLCs used by water utilities and other industries. Source link
A newly released whistleblower complaint reveals details about the “rushed” effort by the Trump administration and U.S. Postal Service to install three new restrictive IT…
The private data of about 33,000 customers of TVB-owned group-buying platform Neigbuy has been compromised in a suspected cyberattack, with police saying they have received…
