Notepad++ has shared additional details on the supply chain attack carried out by Chinese state-sponsored hackers via a ...

The eScan supply chain attack resulted in malware infections after hackers compromised an update server and pushed a malicious file.

A disruptive cyberattack linked to Russian state-sponsored actors has permanently rendered ICS inoperable at a Polish power grid sites.

Apple updates platform security guide, LastPass detects new phishing wave, CISA withdraws from RSA Conference.

Aisy emerged from stealth with $2.3 million seed funding for vulnerability management and threat prioritization platform.

SentinelOne and Censys identified 175,000 exposed Ollama hosts, distributed across 4,032 autonomous system numbers (ASNs).

The White House has revoked software security guidance issued during the Biden administration due to “unproven and burdensome” requirements ...

Hackers have abused the Hugging Face infrastructure to host a malicious payload and infect Android users with a remote access trojan.

Ivanti has patched CVE-2026-1281 and CVE-2026-1340, two Endpoint Manager Mobile (EPMM) flaws exploited as zero-days.

LLMs and MCPs have been hijacked at scale and the unauthorized access sold for profit in Operation Bizarre Bazaar.