The Cybersecurity and Infrastructure Security Agency (CISA) has released an alert to provide guidance in response to the ...

Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure ...

GitHub facades and Ethereum smart contracts power a March 2026 admin-targeted campaign, enabling resilient C2 rotation and ...

Collectively, the extensions amassed about 20,000 installs in the Chrome Web Store. All 108 extensions route stolen credentials, user identities, and browsing data to servers controlled by the same ...

How mature is your AI agent security? VentureBeat's survey of 108 enterprises maps the gap between monitoring and isolation — ...

Last week, something alarming happened in the world of software — and almost nobody outside the tech industry noticed. A widely-used software library called LiteLLM, downloaded over 95 million times ...

A severe cross-site-scripting (XSS) vulnerability in DNN, a popular open-source content management platform, allows attackers ...

The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) circulated a High Alert: Act Quickly ...

Proof-of-concept exploit code has been published for a critical remote code execution flaw in protobuf.js, a widely used ...

Scammers are using fake traffic violation texts with QR codes to steal personal and financial data, posing as state courts and government agencies. Cybercriminals have rolled out a new variant of ...

The USGS Volcano Alert Level (ground-based hazards) and Aviation Color Code (airborne hazards) communicate Kilauea status and activity. After episode 44, which is forecast to begin between April 6-14, ...