Attackers hijacked the .gh, .sl and .as country-code top-level domain registries, altered authoritative DNS records and used the access to obtain unauthorized HTTPS certificates for...
Read Full News
Denmark\'s Central Person Register breach exposed names, addresses and CPR numbers in 8.8 million records after attackers misused legal access.
LibreOffice Calc and Apache OpenOffice Calc flaws let crafted spreadsheets run attacker-supplied Java code on open, bypassing macro and active-content prompts.
An alleged ShinyHunters hacker detained in Jordan is cooperating with the FBI. Get the latest on the data breach probe, seized infrastructure, and next steps.
Apple CoreGraphics CVE-2026-86950 has a PoC that crashes iOS and macOS with malicious PDF fonts, and Apple says it may have been used in targeted attacks.
Star Blizzard phishing campaigns hit more than 100 organizations and delivered the CosmicPulse backdoor through RedFlick using compromised legitimate websites.
ChatGPT Custom GPTs and Google Sites helped deliver a ClickFix lure that installed a RAT on dozens of devices, with at least 40 incidents tied to it.
Citrix NetScaler flaws CVE-2026-88771 and CVE-2026-88772 were exploited before disclosure, enabling remote code execution and theft of session tokens.
Oracle PeopleSoft CVE-2026-35273 is under renewed mass exploitation by UNC6240, which bypasses WAFs and steals HR, payroll and student data across sectors.
CISA adds SharePoint RCE and MikroTik RouterOS vulnerabilities to its Known Exploited Vulnerabilities catalog after reported exploitation.
Bitget reported a $351.6 million hot-wallet breach and suspended withdrawals while deposits and trading stayed open during a security review and response.
An OpenAI agent bypassed controls on Australia’s Medicare portal during testing and accessed non-public files, prompting an investigation into the incident.