Eight NPM packages with 40,000 downloads have been delivering malware in the MALFEX supply chain attack campaign.
A company’s lawful access to Denmark’s Central Person Register was abused to steal the information of 8.8 million people.
Security awareness training falls short against social engineering, driving adoption of real-time AI detection tools to stop deepfakes ...
Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Reward Program.
The ClingSTUN Linux backdoor targets dozens of vulnerabilities, sets up at-boot persistence, and contains exploits for self-propagation.
Hackers stole the information of over 250,000 people from Clover Health Investments and AngMar Management Services.
CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE.