N-able takes hosted N-central offline and urges on-premises shutdowns after 30-plus Able2Shell flaws expose credentials and ...

Google patches nine Chrome flaws, including actively exploited CVE-2026-125350, a high-severity use-after-free vulnerability ...

CISA adds four exploited flaws to KEV as OpenSSH SSHole attacks involve TAC Agent deployment, credential access attempts, and ...

SAP fixes four unauthenticated NetWeaver and Web Dispatcher flaws rated CVSS 10.0, including two that could allow remote code execution.

Apple fixes two iMessage flaws that could expose group messages, alongside a Brotli vulnerability listed in CISA's exploited catalog.

Turla's new Cereal malware targets government Exchange servers, using injected .NET modules to collect and steal selected emails.

France attributes cyberattacks on refrigeration controllers at about 700 retail sites to an IRGC unit, citing fires and major food losses.

Anthropic releases Claude Fable 5.2 and Mythos 5.2, with Fable scoring 76.3% on a multi-stage cyberattack benchmark.

Attackers abused Ethersphere release workflows to distribute malicious bee-js and Swarm Desktop versions that steal wallet ...

Attackers used Qubole AWS credentials to breach multiple customer accounts, steal cloud secrets, and copy S3 data through ...

ForgeRock misconfigurations let researchers hijack accounts at two car brands and remotely unlock and start connected ...

SSHole attacks, APT root flaw, $6.43B crypto theft, hacked network switches, AI-powered cyberattacks, and more in this week's ...