ASUS released router firmware updates to address two flaws allowing attackers to execute commands via malicious VPN ...

AI agents attempted to probe and hack US and Canadian government websites while trying to retrieve publicly available ...

MetaMask is responding to a security incident affecting its infrastructure and has begun exiting affected staking validators ...

Abandoned branded QR code domains can be claimed through a weakness in QR Tiger’s custom domain feature and lead users to ...

A malicious Twitch chat message could be turned into native code execution on a streamer’s Windows PC through a OBS Studio ...

The ShinyHunters cybercrime group claims it breached FBI systems after discovering and exploiting a zero-day flaw in Oracle ...

CISA has added a critical FortiMail zero-day to its KEV catalog after Fortinet confirmed active exploitation of the flaw.

Tuta launched a free Nextcloud integration that lets users save attachments on the cloud storage and create meeting links ...

Helpfeel has disclosed a major data breach affecting its Gyazo image-sharing service, after an attacker exploited a vulnerability in an upload server to execute arbitrary commands and access backend ...

Mozilla has released Firefox 157 with Nova, an interface refresh with updated colors, icons, themes, and a returning Compact ...

Google’s Gemini AI model accessed the internet and breached systems belonging to three real companies during a cybersecurity evaluation in May, marking the first publicly reported instance of a Google ...

A malware campaign impersonates LastPass on GitHub to trick users into installing an information stealer that can harvest browser passwords, cryptocurrency wallets, and messaging app sessions. The ...