Attackers performed an email takeover attack on a dormant maintainer account and published new node-ipc versions containing ...

A newly discovered zero-day vulnerability in Microsoft Exchange Server has experts declaring an emergency and urging CSOs to ...

The authentication bypass bug (CVE-2026-20182) in Catalyst SD-WAN gives remote attackers admin access, with no workaround ...

Security is having its "Waymo moment," moving past endless alerts to autonomous systems that investigate and fix threats ...

Linux admins reeling from handling last month’s CopyFail and last week’s Dirty Frag kernel vulnerabilities have a new ...

Microsoft has unveiled a new AI-driven vulnerability discovery system that identified 16 previously unknown Windows ...

A newly disclosed authentication bypass flaw (CVE-2026-44338) in PraisonAI drew near-instant probing, exposing risks from ...

Researchers say the campaign uses a browser-based JavaScript VM to hide credential theft and intercept MFA at scale.

The guidance gives CISOs a way to press vendors on AI transparency, but analysts say the hard part will be proving that ...

From revamping security culture to transformation threat hunting operations, 2026’s award-winning projects underscore the ...

OpenAI’s new cybersecurity platform aims to automate vulnerability detection, patch validation, and secure software ...

Linux server admins may get the ability to turn off a vulnerable function in the OS kernel until a patch for a zero-day ...