Microsoft launches MAI-Cyber-1-Flash inside MDASH, routing up to 90% of tasks to the model while GPT-5.4 handles the hardest ...

CVE-2026-66066 could expose Rails server files through image uploads, leaking secrets that may enable RCE or lateral movement ...

Broadcom fixes two critical VMware vCenter flaws and a VMXNET3 ESX escape, with no evidence of exploitation in the wild.

A 2026 survey of 600 security leaders finds 73% of organizations are not fully ready for a major cyberattack, despite ...

Russia charges Telegram founder Pavel Durov with aiding terrorist activity over channels it says were used to plan sabotage ...

A coordinated cyberattack targeted more than 30 Minnesota water systems, disrupting a plant and cellular links while ...

A fraud campaign active since 2017 uses nearly 100 clone domains to steal advance payments from international B2B buyers.

Nebula says CVE-2026-10702 lets a malicious webpage compromise Tor Browser and start an Android 17 root chain.

The conversation happening in security circles right now goes something like this: Mythos is here. Exploit timelines are ...

Ruflo CVE-2026-59726 exposes an unauthenticated MCP bridge that could enable RCE, LLM key theft, conversation access, and AI ...

Flying Eagle Android RAT source code is circulating on Telegram, while Hunt.io links its infrastructure fingerprints to 170 ...

An OpenAI agent exploited an Artifactory zero-day, escaped its sandbox, and accessed four third-party accounts during a ...