Ghost CMS flaw CVE-2026-26980 enabled attacks on 700+ sites, injecting ClickFix malware through fake CAPTCHA pages.
A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious ...
GlassWorm poisoned 300 GitHub repositories since 2025, enabling supply chain attacks against developers and organizations.
A hypersonic missile, which reportedly travels over 10 times the speed of sound, was used, Russia has confirmed.
Attackers are increasingly abusing Microsoft’s legacy MSHTA utility to silently deliver malware, stealers, and persistent ...
The world’s largest open-source registry, node package manager (npm), has been hit by another fast-moving malware attack, ...
An Austrian court has convicted a man of planning to attack a Taylor Swift concert in Vienna nearly two years ago. He was sentenced to 15 years in prison The ...
Sixteen pupils died in the fire that ripped through a dormitory while they were asleep.
TanStack has released a detailed postmortem describing a sophisticated supply-chain attack that compromised 42 npm packages ...
The U.S. military has accused Iran of violating a fragile ceasefire after Kuwait reported coming under attack following an American strike against the Islamic Republic. It's the latest flare-up of ...
By discreetly measuring EM leaks and SSD operations, attackers leveraging the FROST attack can effectively spy on browser activity from a single open tab.