A hijacked DebugBear script drained about $2.7 million from Polymarket traders, affecting 726 wallets and triggering $3.9 ...

CopperDragon malware supplier may link five Chinese hacking groups, Check Point Research said Tuesday in a report on three espionage campaigns against telecoms, governments and critical infrastructure ...

Fortinet has disclosed a critical origin validation error in FortiClient that allows unauthenticated remote code execution (RCE) on an endpoint when a user visits an attacker-controlled web page.

A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository. Quay enables anonymous access by default, and ...

A weaponized Claude Code extension found on Open VSX can give attackers persistent remote access to developer systems by planting an SSH key, opening a reverse tunnel, and installing startup scripts.

StingyBasilisk spies on isolated networks using Windows named pipes and SMB to secretly spread malware across systems.

The model platform removed one model marketed for cyberattacks, but plenty of others remain ...

Two critical weaknesses in Barracuda Email Security Gateway (ESG) let unauthenticated attackers chain a pre-authentication ...

Solana plans to retire durable nonces, a feature central to the $285M Drift hack, by 2027, but this change addresses only the attack vector, not ...

Hasselblad wasn't impressed by hackers running Doom and cracking the firmware on its cameras, as its legal team goes after jailbreakers ...

Polymarket suspends its trading after a $2.6 million hack. A compromised external script reportedly allowed accounts to be drained.

Shahid Kaveh loosely translates as shahid meaning martyr, and Kaveh is thought to be named after a revolutionary guard ...