Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between October 15 and October 16. Users ...

Plex Media Server installations face in-the-wild exploitation via Plex2Shell exploit chain delivering cryptocurrency miners ...

Anthropic has acquired Opaque, a company that turned its confidential computing research into technology used in production ...

ConnectWise is scrambling to restore its Cloud Backup, SaaS Security, and Cloud Management services after hackers abused a compromised credential to access customers’ M365 tenants. The company ...

Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.

State-sponsored attackers exploited Fortinet vulnerabilities to deploy PeerStitch against a telecommunications organization.

MITRE released ATT&CK v20 with new techniques covering AI prompt injection, MFA bypass, and water utility breaches across Enterprise and OT.

CyberSN’s jobs report shows US cybersecurity job postings fell 26% in January–September 2026, while AI Security Engineer ...

Citizen Lab has uncovered AdFection, an operation delivering Candiru spyware via malicious ads, in zero-click attacks.

Chinese APT Armory Castle exploited a BeyondTrust vulnerability tracked as CVE-2026-102764 as a zero-day since August.

IBM’s Steve Wallin explains why the speed and scale of AI-assisted attacks make proactive security, zero trust, resilience ...

A cyber incident at defense contractor BAE Systems has halted federal bankruptcy notices and creditor services across US ...