Dell fixes six CSM flaws enabling authentication bypass, storage credential access, and cluster-wide privilege escalation.

OpenAI parted ways with three safety researchers after finding they mishandled sensitive information, reportedly tied to infrastructure architecture.

China-nexus UAT-11587 targets Asian government and policy groups with Antino, a Rust backdoor that uses Microsoft 365 for C2.

Fortinet says attackers are exploiting a FortiMail flaw that lets unauthenticated users write arbitrary files via crafted HTTP requests.

European police arrested three KillSec suspects, seized its leak site and servers, and secured at least 110 TB of data.

Android 17 limits accessibility service access under Advanced Protection to verified Accessibility Tools, blocking a major malware abuse path.

Public PoC for CVE-2026-86950 triggers a controlled out-of-bounds write in CoreGraphics; code execution is not demonstrated.

OpenAI disrupted a coordinated campaign attributed to Moonshot AI associates that sought to extract protected reasoning at ...

Bitget says attackers exploited a third-party zero-day to steal $387.5 million and move laterally into its wallet environment ...

Attackers are exploiting CVE-2026-76504 to access Cisco SD-WAN Manager APIs as admin without credentials; fixed releases are ...

Unknown attackers exploit a patched Citrix NetScaler flaw to gain root access and deploy web shells and a tunneler.

Citrix NetScaler CVE-2026-88772 is exploited in the wild and can enable remote code execution through a DTLS buffer overflow.