Nightmare Eclipse has dropped a zero-day targeting a privilege escalation vulnerability in a Kaspersky endpoint security ...

ServiceNow has patched three maximum-severity vulnerabilities, including two leading to remote code execution.

McKesson has confirmed a data breach as ShinyHunters claimed the theft of 284 million records, including PII and PHI.

AI agents breached Hugging Face using conventional tactics and stolen credentials. What security leaders must fix in identity ...

Anthropic is warning Claude AI users about infostealer malware infections that enable attackers to run up victims’ usage ...

Hackers have started exploiting CVE-2026-66066, referred to as KindaRails2Shell, a critical vulnerability in Ruby on Rails.

Boston Scientific is still working to restore systems knocked offline by a cyberattack that disrupted manufacturing and ...

The FulcrumSec extortion group has claimed the theft of more than 80 GB of data from the Manchester Airports Group.

A federal judge has ruled in favor of artificial intelligence company Anthropic in its legal battle against the Pentagon ...

The city of Berlin refuses to pay a ransom after Rhysida claimed the theft of personal information, credentials, and private ...

PaperCut has released a second emergency patch for the exploited vulnerabilities, which are now tracked as CVE-2026-82078 and CVE-2026-81578.