A threat actor is using an AI-built ransomware attack toolkit that automates Active Directory discovery and helps evade ...

AI-powered attacks and shadow AI adoption are creating new security risks inside the browser. Push Security explains why ...

A threat actor tracked as DriveSurge has been operating large-scale malware distribution campaigns using ClickFix and ...

Multiple Dashlane users have been locked out of their accounts following brute-force attacks that attempted logins from ...

Microsoft says an ongoing incident is preventing users of its Teams collaboration platform and Office for the web cloud-based ...

Attackers are exploiting vulnerabilities faster than many organizations can identify and patch them. SecAlerts explains why ...

Hackers are targeting WordPress websites running a vulnerable version of the WP Maps Pro plugin, which allows creating rogue ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered government agencies to secure their systems against a high-severity Oracle WebLogic Server vulnerability that was patched ...

More than 30 npm packages under Red Hat's '@redhat-cloud-services' namespace were compromised in a supply-chain attack that distributed a new variant of the Shai-Hulud credential-stealing malware, ...

Google has released the June 2026 Android security patches to address 124 vulnerabilities, including one zero-day flaw exploited in targeted attacks. Local attackers can exploit the actively abused ...

Microsoft is working to address an ongoing incident preventing customers from setting up multi-factor authentication (MFA) or accessing the My Sign-Ins platform.

An Android remote access trojan named BTMOB is offered to cybercriminals with a builder interface for generating malware ...