Discover the best open-source vulnerability scanners of 2026 that help CIOs minimize security costs while ensuring robust protection against software vulnerabilities. Learn about their features and ...

When the Benevolent Bureau of Birds runs the DEF CON Capture the Flag finals this weekend, they will be presiding over something that did not exist two years ago: a competitive environment where ...

Clop-linked attacks exploit CVE-2026-12569 to deploy a Windchill web shell that decrypts credentials, maps vault data, and ...

Hackers have already begun using a proof-of-concept (PoC) exploit for a critical Microsoft SharePoint vulnerability, published by cybersecurity company Rapid7 on Tuesday.

N-able recently disclosed that a threat actor targeted its N-central product through a patch bypass vulnerability and used the flaw to gain access to customer environments. The company, which sells ...

A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with limited human involvement. The activity was ...

Head Mare exploits two TrueConf flaws to gain SYSTEM privileges and replace client installers with PhantomCore malware across ...

Russian state hackers are using a maximum-severity vulnerability in Microsoft Outlook’s Exchange Server to backdoor unpatched machines and steal credentials and other confidential information from ...

Russian hackers are exploiting hotel Wi-Fi networks at various locations that attract corporate travelers to compromise ...

The critical zero-day can provide direct SQL access to Metabase’s underlying database, potentially exposing credentials, API keys, and other sensitive data.