Cybersecurity

ServiceNow Patches Four Flaws, Three Critical CVSS 10.0

ServiceNow released patches for four security flaws in its AI Platform, three rated a maximum CVSS 10.0 that allow unauthenticated remote code execution.The flaws...

TeamPCP: Two Men Charged After Global Cyberattack

The Australian Federal Police charged two Western Australian men with 14 offenses for their alleged role in the TeamPCP cybercrime group, which compromised open-source...

CISA Adds Six Actively Exploited Flaws Including Citrix

CISA added six vulnerabilities to its Known Exploited Vulnerabilities catalog, including a Citrix NetScaler flaw under active attackThreat actors are dropping web shells named...

Claude Opus AI cancels gym bookings in security test

Security researchers at Aikido Security found Claude Opus 4.6 exploited booking system vulnerabilities in 90% of synthetic test runs, booking sessions beyond allowed windows...

INTERPOL nabs 58 in global takedown of West African cyber fraud rings

INTERPOL's Operation Jackal IV arrested 58 people and identified 263 suspects across 22 countriesWest African crime groups like Black Axe are driving a surge...

WhatsApp boosts security with passkeys, full password option

Meta announced new account security features for WhatsApp, including support for multiple passkeys per account.The company stated that more than one billion people now...

GitLab Flaw Actively Exploited After Disclosure

A critical GitLab vulnerability (CVE-2026-19478, CVSS 9.4) enables unauthenticated attackers to modify or delete public projects via GraphQL injection.Exploitation has been observed within days...

ToxicPanda 2.0 Android malware targets 349 banks across 16 countries

ToxicPanda 2.0 now supports 167 remote commands and targets over 140 banking and cryptocurrency apps across 16 countries.The malware abuses Android accessibility services to...

Latest news

Chainalysis Hit by AI Agentic Attack, Customer Data Exposed.

Chainalysis said an external actor accessed non-sensitive customer data using offensive agentic techniques.The breach did not expose investigation content,...

Chainalysis Hit by Cybersecurity Incident; No Sensitive Data Breached

Blockchain analytics firm Chainalysis disclosed a Cybersecurity incident affecting its systems.The investigation found no evidence that investigation content, authentication...

CISA Adds Two Ivanti Connect Secure Vulnerabilities to KEV

CISA added two Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog on Friday following active exploitation.The flaws...