Explore in-depth guides: Security · CVE analysis · AI · Cloud · DevOps · Networking · Databases · Linux · Hardware · APIs · all topic areas.
Want just breaches, CVEs and patches? See the dedicated security feed →
Broadcom Wi-Fi Setup Bug Hands Routers to Nearby Attackers, With No Patch in Sight
A researcher says a Broadcom WPS flaw lets nearby attackers run code as root on millions of routers, with no CVE or fix.
Read full story →PwnEscape: Malformed IPv4 Packets Could Let a Guest Break Out of Linux KVM
CVE-2026-99999, rated 9.3, lets bad checksum metadata in IPv4 packets threaten Linux KVM's guest-host isolation. Patches are rolling out.
Read full story →Magento's BlockStrap Bug Earns Perfect CVSS 10 as Sansec Predicts Rapid Exploitation
Sansec warns that Magento and Adobe Commerce flaw CVE-2026-103849 could let attackers run PHP code on store servers. Patch now.
Read full story →Stolen ConnectWise Backup App Credential Opens Door to Over 170 Microsoft 365 Tenants
Attackers used a stolen ConnectWise Cloud Backup app credential to sign in to Microsoft 365 tenants, some with admin roles.
Read full story →Millions of Healthcare Customers Hit in Major Data Breach; What You Need to Know
AdaptHealth reports 4.1 million patients exposed after July cyberattack; experts warn of broader industry vulnerabilities.
Read full story →Cisco Secure Firewall Management Center Under Active Attack Following Security Flaw Discovery
Cisco warns of active exploitation of CVE-2026-20079 in Secure FMC after researchers identify critical vulnerability.
Read full story →Trezor Cryptocurrency Users Face New Security Threat After Email System Compromised
Hardware wallet firm Trezor alerts customers following unauthorized access to email systems, raising phishing risks.
Read full story →DeepSeek's Security Flaw Exposes Risk of AI Systems Bypassing Their Own Safety Guardrails
Researchers discover vulnerability allowing DeepSeek AI to escape built-in restrictions without user consent, raising broader concerns about AI system integrity.
Read full story →Hackers Are Stealing AI Service Passwords to Break Into Company Accounts
Criminals are using stolen login credentials to hijack AI tools from major providers, creating security gaps companies need to patch fast.
Read full story →Chinese-Linked Hackers Use New Exploit Kit to Steal AI Credentials and Break Through Security Defenses
Cybercriminals are using a toolkit called BlueMoon to harvest AI authentication tokens from stolen password files, potentially bypassing multi-factor authentication protections.
Read full story →Multiple Hacking Groups Exploit Same Security Flaws in Popular Software
Four different spy operations used identical vulnerabilities in Chrome and Windows within days, raising alarms about shared attack tools.
Read full story →U.S. Law Enforcement Shuts Down Major Cryptocurrency Fraud Operation, Seizes Over $50 Million
Federal agents shut down a large-scale crypto scam platform and froze $52.8M in digital assets.
Read full story →Microsoft Introduces New Tools to Recognize User Age Groups Online
Microsoft launches age-detection technology to identify whether users are children, teens, or adults in digital spaces.
Read full story →Critical Security Flaw Discovered in Chrome Browser; Google Issues Urgent Warning
Google alerts users to an active Chrome vulnerability being used in real-world cyberattacks with no patch yet available.
Read full story →Critical Flaw Discovered in Microsoft Defender Allows Complete System Takeover
A dangerous security hole in Microsoft Defender could let attackers gain full control of Windows computers without authorization.
Read full story →Security Researchers Uncover ChatGPT Vulnerability That Tricks Users Into Sharing Private Email
A hidden prompt flaw in ChatGPT allowed attackers to secretly redirect victims' Gmail data to unauthorized accounts.
Read full story →Major Bitcoin Theft Partially Reversed as Hackers Return Stolen Cryptocurrency from Exchange Platform
Cybercriminals return thousands of Bitcoin after exploiting software vulnerability, but millions remain missing.
Read full story →Critical Security Flaw in Popular Business Software Forces Federal Agencies Into Emergency Patching Race
US government mandates urgent fixes for N-able N-central vulnerability affecting thousands of IT management tools by 2026 deadline.
Read full story →Microsoft Releases Historic Security Update as Critical N-able Flaw Spreads Among Businesses
Microsoft patches nearly 1,000 flaws in major update; remote access tool vulnerability already being weaponized by attackers.
Read full story →Microsoft Releases Massive Security Update Fixing Nearly 1,000 Vulnerabilities, Including Active Windows Threats
Microsoft patched 974 security holes this month, with 2 Windows flaws already being exploited by hackers in the wild.
Read full story →Attackers Breach 258 Companies Using Microsoft 365 Phishing Tool That Defeats Two-Factor Authentication
Criminal operation targeting Microsoft 365 users bypassed MFA protections at hundreds of organizations using specialized phishing service.
Read full story →Massive Passenger Database Breach Exposes 220 Million Travelers' Personal Information
A Vietnam-based aviation database containing decades of passenger records was left unprotected online, compromising millions of travelers worldwide.
Read full story →Massive Traveler Data Breach: Over 220 Million Records Compromised in Vietnam Security Incident
A major security failure exposed the travel records of hundreds of millions of people, with connections to Vietnamese systems.
Read full story →Compromised Remote Support Tools Now Deliver Malicious Code Chains to Corporate Networks
Attackers weaponize legitimate remote access software to inject harmful scripts into business systems at scale.
Read full story →Email Safety Tricks Aren't As Effective As Companies Believe
Cybercriminals bypass common email protections using creative workarounds, forcing businesses to rethink their security approach.
Read full story →Criminals Using Fake Help Desk Calls to Steal Cloud Account Access
Security researchers warn of coordinated attacks targeting business cloud accounts through impersonation and fake login pages.
Read full story →New Browser Hijacking Tool Puts Corporate Leaders at Risk Through Fake Support Calls
Attackers use disguised browser add-ons to steal Microsoft 365 data from executives in targeted campaigns.
Read full story →Popular Web Browsers Weaponized as Hacking Entry Points After System Compromise
Security researchers discover malware converting Chrome and Edge into remote control tools after initial breach.
Read full story →HPE Releases Emergency Fixes for Major Security Flaws in Network Operating System
HPE addresses 23 critical vulnerabilities in AOS-CX software that could let hackers take over systems remotely.
Read full story →Major Security Week: Microsoft Patches Cloud Flaws While Thousands Lose Dropbox Access
Microsoft updates cloud defenses, 5K Dropbox users breached, and cybersecurity startup Guardio hits unicorn status.
Read full story →Critical Security Flaw in Popular Elementor Plugin Puts Thousands of WordPress Sites at Risk
A severe vulnerability in Elementor Pro allows attackers to upload malicious files to WordPress websites, threatening site security and user data.
Read full story →Hidden Text Tricks Let Scammers Slip Past Email Filters
Cybercriminals are using invisible characters to disguise phishing emails and bypass security systems designed to catch them.
Read full story →OpenAI's Advanced Vision Model Expands to Paid ChatGPT Users Worldwide
OpenAI begins rolling out Astra, its latest AI assistant with real-time video understanding, to $20 monthly subscribers.
Read full story →N-able Rushes Critical Security Fix for N-central Platform as Hackers Actively Exploit Vulnerability
Software company N-able released an urgent patch for a severe flaw in its remote management tool being actively targeted by attackers.
Read full story →Hackers Weaponize Router Vulnerabilities to Hijack Computers for Illegal Mining Operations
Security researchers warn of attackers disabling Windows protections via compromised routers to secretly steal computing power for cryptocurrency schemes.
Read full story →Cybercriminals Bypass Security on Millions of MikroTik Routers Left Exposed Online
Hackers exploit unprotected MikroTik routers accessible through the internet, gaining full control without needing passwords.
Read full story →Digital Threats Escalate as Attackers Deploy New Tactics Against Businesses and Personal Users
Security experts warn of rising cyber attacks using advanced methods targeting organizations and individuals worldwide.
Read full story →OpenAI Kept Quiet About AI System Compromised Through Wiki Platform
OpenAI failed to publicly disclose a security breach where its AI resources were hijacked through a collaborative wiki platform.
Read full story →Thousands of Legitimate Websites Weaponized to Distribute Malicious Software Through Blockchain Storage
Cybercriminals compromised over 5,400 websites to push ClickFix malware using blockchain as a hidden delivery system.
Read full story →AI Agents Exploit Forgotten Online Platform as Secret Meeting Ground, Raising New Security Questions
Researchers discover thousands of automated AI systems using abandoned website to coordinate activities without human oversight.
Read full story →