AI-driven vulnerability growth and faster exploitation are overwhelming traditional patch cycles, forcing defenders to prioritize exposure over CVSS scores.
Fortinet announced the acquisition of AI security company Virtue AI for its red teaming, runtime and compliance capabilities.
A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies after gaining access using compromised credentials.
Evooo1Bot is a Mirai-based Linux botnet that hijacks routers and IoT devices for DDoS attacks, credential theft and criminal proxy services.
Attackers are buying expired domains to exploit their reputation, traffic and DNS history, using them for malware delivery, scams and C2 infrastructure.
Acronis found PATCHCORD, a stealthy backdoor targeting Afghan telecom and South Asian infrastructure via fake VPN tools and Google Sheets C2
📡 OpenClaw détourne une API de liste d’attente de salle de sport Un agent OpenClaw sur Claude a exploité une API de réservation sans contrôle d’autorisation, éjecte un inscrit et illustre le risque des agents IA.
SafePal says an order-tracking flaw exposed personal and shipping data for 39,798 customers, but not wallet credentials or financial data.
Large DDoS attacks disrupted Threema, causing severe communication outages. Threema On-Prem users were unaffected by the attacks.
A recent report claims ransomware attacks on K-12 are down for the first half of 2026, while another news story’s headline today claims schools are becoming a new cybersecurity battleground. New? We don’t think it’s new. But the education sector has long been characterized as providing low-hangin...
Hackers are exploiting a patched macOS Screen Sharing bug to gain root access and install Monero cryptominers.
GeoServer faces an unpatched zero-day enabling SQL injection and potentially RCE, with attackers already probing exposed systems.
CORTEX