Australian police charged two men over their alleged TeamPCP role in supply chain compromises affecting Trivy, KICS, and ...

CISA adds six exploited flaws to KEV, including a NetScaler bug tied to web shells and 36 exploitation attempts in 12 days.

GoCaracal gave operators remote shell access and browser data theft during a June 2026 intrusion at a Venezuelan ...

Spark RAT targets Cambodia through a multi-stage campaign that uses a vulnerable OPSWAT driver to terminate security ...

Amazon Kiro flaw lets crafted workspace content trigger sensitive data exfiltration after a user opens the workspace and ...

Prophet Security says 40% of teams use AI daily, while 28% of alerts go uninvestigated and 60% report missed alerts caused serious issues.

Two unpatched Kaltura mwEmbed flaws allow unauthenticated file read and could enable RCE through unsafe deserialization.

FBI disrupted proxy infrastructure used in China-linked espionage to profile and steal data from U.S. critical infrastructure ...

CISA adds CVE-2026-60004 to KEV amid active Gitea RCE exploitation; a separate reported attack deployed a miner-like dropper.

U.S. Treasury sanctions Iran-linked cyber actors under Operation Economic Outcast, targeting MOIS-linked hackers tied to U.S.

AnonyMousKIT uses AI voice agents posing as Apple Support to request passcodes, Apple ID credentials, and live 2FA codes from ...

INTERPOL's Operation Jackal IV arrests 58 people, identifies 263 suspects, and disrupts fraud and laundering networks across ...