Cybersecurity

Over 950 online stores, primarily running Magento, have been infected since July 2025 in a campaign that injects malicious JavaScript via CMS blocks.The threat...

Wasmtime patched two critical sandbox escapes, both rated 9.9.One flaw affects only ARM64; no attacks reported.Updates: 36.0.19, 48.0.7, 49.0.4, and 50.0.0. Two critical flaws in...

Attackers stole 497 Microsoft 365 sign-in tokens across 79 organizations using adversary-in-the-middle relays, compromising 97 accounts.The threat actors replayed stolen tokens instead of guessing...

Google updated its privacy policy to allow personalized ads based on data from connected services like Gmail and Photos when users enable Personal Intelligence...

CISA added two critical vulnerabilities to its Known Exploited Vulnerabilities catalog, citing active exploitation targeting cryptocurrency wallets.The flaws affect Collabora Online CODE Server (CVSS...

Ruby released versions 4.0.9, 3.4.12, and 3.3.13 to patch four critical vulnerabilities in the Onigmo regular expression engine, two rated the maximum 10.0 severity.The...

A large-scale campaign targeting Fortinet and Palo Alto Networks firewalls has been disclosed, with threat actor k0t linked to ransomware groups such as Qilin...

Ungoverned AI agents with access to API keys and database passwords are operating on endpoints across enterprise networks without oversight or ownership.Only 51.8% of...