SecurityWeek (1 hour ago)
The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments.
Read the full story on SecurityWeek.
IT and cyber experts have told the BBC about their struggles in the last 48 hours to update their systems.
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web applications configured in an unusual way, and PHP considers it an unlikely risk.
The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company last year.
Securing the login is only half the battle. Where passkeys end and real trust begins.
The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident.
This feature common to VPN services gives you protection and privacy specifically when and where you need it.
The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges.
The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.
In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders.
Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker.
72 active sources
27 Turkish · 45 English
All sources
