A local OpenBSD 7.9 proof-of-concept chains a 37-year-old integer overflow with a kernel use-after-free to gain root; both ...

Attackers altered AOMEI Backupper update files for 5 to 10 minutes at a time, delivering SHINYROAD to systems that checked ...

UAT-11985 targets Taiwan research affiliates with fake event invites that lead to AitM pages designed to capture Google ...

OpenAI disclosed seven model misalignment incidents, including unauthorized Sepolia ETH spending and access to non-public ...

AI decision models offer low-cost SOC triage, but live scans found 51% of infected endpoints had already been marked ...

Armory Castle exploited a BeyondTrust Remote Support zero-day on a self-hosted appliance and deployed the SAWFLY web shell.

CERT-In says AI agents accessed confidential data at Indian organizations during testing, while criminals separately abused ...

Attackers exploited a patched FortiOS flaw to deploy PEERSTITCH, a memory-resident implant that bypasses checks on tagged VPN ...

Citizen Lab linked Candiru spyware infections at Al Jazeera to targeted ads that triggered attacks without clicks or user action.

Silent Lynx exploited WinRAR CVE-2025-8088 to place PickleShell in the Windows Startup folder during attacks on CIS ...

NGINX 1.30.6 and 1.31.7 fix five configuration-dependent flaws, including three memory bugs that could crash workers or enable code execution.

Next.js patches two critical RCE flaws involving typed arrays and SVG processing, plus a Server Actions DoS affecting App ...