Zoom and GitLab have released security updates to resolve a number of security vulnerabilities that could result in denial-of ...

AI is transforming MSSPs in 2026 by automating assessments, boosting margins, and enabling CISO-level services without added ...

High-severity flaws in the Chainlit AI framework could allow attackers to steal files, leak API keys & perform SSRF attacks; ...

Experts say the VoidLink Linux malware was largely built using AI, reaching 88,000 lines of code in days and highlighting ...

North Korean hackers abuse Visual Studio Code task files in fake job projects to deploy backdoors, spyware, and crypto miners ...

LastPass reports an active phishing campaign using fake maintenance emails and spoofed domains to trick users into revealing ...

A flaw in the binary-parser npm package before version 2.3.0 lets attackers execute arbitrary JavaScript via unsanitized ...

Scanning 5M apps uncovered 42K exposed secrets in JavaScript bundles, revealing major gaps in traditional SAST, DAST, and ...

Gartner introduces Exposure Assessment Platforms, showing 74% of vulnerabilities are dead ends and projecting 30% less downtime by 2027.

Researchers found a LinkedIn phishing campaign delivering a remote access trojan via DLL sideloading, WinRAR SFX files, and ...

Three vulnerabilities in Anthropic’s MCP Git server allow prompt injection attacks that can read or delete files and, in some ...

Experts reveal Evelyn Stealer malware abusing VS Code extensions to steal developer credentials, browser data, and ...