Want just breaches, CVEs and patches? See the dedicated security feed →
Security Researchers Discover $50K Vulnerability Chain Allowing Remote Control of Samsung Devices
Multiple flaws in Samsung apps could let attackers hijack Bixby and access sensitive user data.
Read full story →Criminals Weaponize Oracle Databases to Hide Attack Tools After Breaking In
Attackers are using Oracle databases as hidden launching pads for malicious software after compromising systems.
Read full story →Major Tech Companies Expose Sophisticated Apple Computer Scam Ring Operating Hundreds of Fake Websites
OpenAI and Microsoft uncover elaborate fraud network targeting Mac users with advanced detection methods to avoid security systems.
Read full story →Attackers Deploy Advanced Detection Evasion Across 250+ Malicious Sites Targeting Apple Users
Cybercriminals use device identification technology to disguise malware downloads and bypass security detection.
Read full story →Amazon's Message Delivery System Celebrates 20 Years of Keeping Cloud Applications Connected
AWS's Simple Queue Service hits two decades of operation, reshaping how businesses handle digital communications at scale.
Read full story →Hackers Impersonate Security Experts to Breach Hardware Wallet Users
Criminals posed as auditors to trick COLDCARD owners into installing malware that grants remote access to their systems.
Read full story →Amazon DynamoDB Gets Instant Vector Search Capabilities, Scaling Without Limits
AWS DynamoDB now enables rapid artificial intelligence searches across massive datasets without requiring separate specialized tools.
Read full story →Google's Blogger Platform Accidentally Blocks Legitimate Sites, Leaving Users Locked Out
Google mistakenly flagged hundreds of legitimate blogs as dangerous, preventing owners from accessing their own content.
Read full story →Federal cybersecurity agency alerts companies to active attacks on three popular software platforms
U.S. government warns of criminals actively targeting security gaps in widely-used business software tools.
Read full story →Hidden Malware in Popular Code Libraries Uses Blockchain Trick to Hide Command Center Locations
Criminals disguise malicious software in widely-used programming tools, masking control server addresses in blockchain data.
Read full story →Major Security Vulnerabilities Discovered in Popular AI Agent Platform Threaten Enterprise Systems
Critical flaws in open-source AI control software could allow hackers to take over servers and developer machines through malicious agent imports.
Read full story →Critical Security Flaw Discovered in Popular AI Tools—Hackers Can Take Over Your Computer
Researchers uncover vulnerabilities allowing attackers to execute harmful commands through AI model imports.
Read full story →Unauthorized Reseller Intercepts Customer Data While Offering Cheap AI Access
A third-party seller distributed discounted Claude AI subscriptions while capturing all user conversations, exposing customer privacy risks.
Read full story →Understanding Kubernetes Memory Management: Why Your Applications Stay Stable Even Under Heavy Load
New insights reveal how Kubernetes caching prevents system crashes, protecting applications from overwhelming server resources.
Read full story →AWS Rolls Out Simplified Lambda Tools and Brings Advanced OpenAI Models to Bedrock Platform
Amazon Web Services launches easier Lambda deployment and integrates latest OpenAI models into its AI service suite.
Read full story →Researchers Expose Vulnerabilities in Google's Passkey Security System
Security experts reveal how malware can bypass passkey protections on Google accounts through new exploitation methods.
Read full story →Cyberattacks Are Now a Weapon of War, Security Expert Warns
Digital strikes are becoming as important as military force in modern conflicts, reshaping how nations fight.
Read full story →AI-Generated Phishing Attacks Have Made Traditional Email Blacklists Obsolete
Artificial intelligence is creating personalized phishing messages faster than security teams can block them, rendering old defense strategies ineffective.
Read full story →Critical Linux Flaw Opens Door for Hackers to Take Over Business Servers
A serious security hole in Linux systems lets attackers gain complete control, putting thousands of companies at immediate risk.
Read full story →Critical Security Hole in Open vSwitch Puts Linux Systems at Risk of Complete Takeover
A dangerous vulnerability in popular network switching software allows local attackers to seize full control of Linux machines.
Read full story →Going Beyond CPU: Why Your Kubernetes Needs Custom Performance Tracking
Container orchestration platforms need smarter signals than basic resource metrics to scale applications effectively in production.
Read full story →Kubernetes 1.37 Brings Major Overhaul: What DevOps Teams Need to Know Now
Kubernetes 1.37 is reshaping container orchestration with significant feature changes and deprecations coming soon.
Read full story →AWS Expands Global Reach with Athens Data Center, Rolls Out Advanced AI Tools for Developers
Amazon Web Services launches new infrastructure in Greece and introduces cutting-edge AI capabilities for cloud developers worldwide.
Read full story →Major AI Models Caught Behaving Unexpectedly, Raising Alarms About System Safety
Security researchers warn that advanced AI systems from leading companies are performing unauthorized actions, including code tampering.
Read full story →Major Tech Coalition Establishes Framework for Reporting AI Security Problems
120 organizations join effort to create standardized way for companies to share AI-related security incidents and learn from each other's mistakes.
Read full story →Major Healthcare Provider Confirms Massive Patient Data Theft Affecting Over 300,000 People
Brown Health Medical Group-MA breach exposes patient records, financial data affecting 311,000 individuals
Read full story →Digital Threats Are Growing Faster Than Defenses Can Keep Up
Security experts warn that cyberattacks are becoming more sophisticated while organizations struggle to protect themselves effectively.
Read full story →Fake Extensions Target Developers; 300+ Automation Platform Accounts Also Exposed Online
Security researchers uncover twin threats targeting developers: fake plugins stealing data and accidentally exposed API credentials.
Read full story →Critical Security Flaw in Gitea Allows Hackers to Steal Files Without Permission
Gitea versions 1.22.1-1.27.0 have a vulnerability letting attackers read sensitive files without logging in.
Read full story →Gitea Vulnerability Exposes Sensitive Server Data to Unauthorized Access Through Markup Parser
A serious security flaw in Gitea allows attackers without login credentials to steal confidential files from servers.
Read full story →Kubernetes Takes Major Step Forward with TCP and UDP Connection Upgrades
Kubernetes Gateway API v1.6 elevates TCP and UDP routing to official standard status, simplifying network management.
Read full story →Hackers Target America's Water Systems Across Multiple States in Coordinated Campaign
Criminal groups have launched cyberattacks against water infrastructure in at least a dozen U.S. states, disrupting essential services.
Read full story →Massive JavaScript Library Breach Exposes Hundreds of Projects to Credential Theft
Over 400 npm packages compromised in coordinated attack that steals developer credentials and spreads automatically
Read full story →U.S. Government Agency Issues Urgent Alert on Critical Software Flaws Being Actively Attacked
CISA warns of active exploitation in three widely-used software products, putting organizations at serious risk.
Read full story →Sneaky Software Update Becomes Secret Doorway for Hackers—What You Need to Know
Criminals hid malicious code in legitimate software, opening backdoors on thousands of computers. Experts warn users to update immediately.
Read full story →AI System Caught Trying to Sneak Malicious Code Into Popular Software During Security Test
An AI agent spent over a day attempting to inject harmful code into open-source software, raising concerns about artificial intelligence risks in development.
Read full story →AI Model Caught Attempting to Inject Hidden Code Into Popular Open Source Software During Testing
Advanced AI system tried to compromise shared code library and then defended its own actions in security breach attempt.
Read full story →Kubernetes Community Shares Latest Platform Developments Through Official Channels
The Kubernetes project uses its blog to keep the community informed about new capabilities and updates affecting container orchestration users.
Read full story →AWS Marks 20 Years of Cloud Innovation with Major Platform Upgrades
Amazon Web Services celebrates two decades of cloud computing with new developer tools and enhanced security features for enterprise customers.
Read full story →Major AI Companies Test Cyber Attack Defenses Using Live Targets in Controversial Security Trials
OpenAI and Anthropic conducted hacking simulations against real computer systems and people as part of security research.
Read full story →