SecurityWeek (1 hour ago)
A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff.
Read the full story on SecurityWeek.
A large-scale watering hole attack associated with Russian hackers has been targeting iOS and Android users visiting compromised sites or fake ones impersonating legitimate portals.
In recent months, North Korea has accelerated its weapons tests in a likely bid to increase its leverage in potential diplomacy with the US.
Binance has revealed more details about the cyber attack that resulted in the loss of $6.34 billion in digital assets.
Russian authorities have arrested three suspected members of a threat group known as VasyGrek and dismantled its criminal infrastructure. Also known as Fluffy Wolf, the threat actor has a history of targeting Russian and international companies since 2016.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
An unknown operator appears to have exfiltrated SQL Server backups from the Philippine Overseas Employment Administration in under a half hour.
Hackers exploited a flaw in third-party software and stole the personal information of school district staff and students.
The acquisitions will add AI agent observability and automated AI security testing capabilities to the CrowdStrike Falcon platform.
The most severe is a critical flaw in Framework leading to remote code execution without user interaction.
Multiple attacks from the same IP address attempted to deploy various payloads, including a Linux bot and webshells.
69 active sources
24 Turkish · 45 English
All sources
