Cosmetics giant Estée Lauder is notifying customers of a data breach after hackers exploited a flaw in Oracle E-Business ...

Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks, allowing threat actors ...

The Ostium trading platform announced that an attacker stole $23.75 million from its liquidity provider vault last week, ...

Researchers escaped the sandboxes in Cursor, Codex, Gemini CLI and Antigravity by having the AI agent write files that trusted host tools later run. Multiple CVEs, patches, and Google downgrading two ...

The JadePuffer autonomous AI agent has upgraded with custom malware called EncForge that focuses on encrypting AI assets, ...

A malicious component dubbed HollowGraph uses the calendar feature in compromised Microsoft 365 mailboxes as a ...

Choosing an AI SOC platform requires understanding how it will perform in your own environment, not just during an evaluation ...

Microsoft is working to fix a known issue affecting Windows Server Update Services (WSUS) servers, which has caused synchronization problems for more than a week.

Attackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat ...

An advanced threat actor is abusing the update mechanism for the ViPNet private networking product suite to target Russian ...

Public exploits have been released for the critical "wp2shell" remote code execution vulnerabilities affecting WordPress Core ...

Microsoft has observed a surge in attacks using the ACR Stealer malware to steal browser-stored passwords, authentication ...