Bitdefender uncovered Midnight Mimosa, a firmware-level Android malware campaign shipping preinstalled on budget smartphones ...
Anthropic’s OSS Scanner sends unreviewed AI bug reports to opt-in open source projects, while a new program brings Claude to ...
The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.
Citrix urges customers to immediately patch CVE-2026-107406, a critical NetScaler vulnerability leading to remote code ...
The US has seized MicroScan and FishHub, tools used by Flax Typhoon and other Chinese APTs in critical infrastructure ...
Google says threat actors hijacked the .gh, .sl, and .as ccTLDs and obtained HTTPS certificates for several of its domains.
Tensorlake npm SDK compromised, Empire Market co-founder gets 40 years, exposed NVIDIA GPU monitors leak telemetry.
Participants earned over $1.2 million at Pwn2Own Ireland 2026 for exploits targeting Google Pixel 10 phones, AI infrastructure, and smart home tools.