Cybersecurity

Grayscale now allows eligible investors to swap crypto directly for shares of 10 select funds via in-kind transfers, bypassing the need to sell for...

Researchers have identified a China-aligned threat cluster named Bronze Sandcastle targeting organizations in Asia and Africa since mid-2025.The group exclusively uses Sandboxie DLL sideloading,...

PHP will release emergency patches for two critical remote code execution vulnerabilities rated 9.2 on the CVSS v4.0 scale.The flaws, dubbed php2shell by researchers,...

Critical path traversal vulnerability CVE-2026-106173 in Fortinet FortiSIEM carries a CVSS score of 9.4 and can be exploited remotely without authentication.Horizon3.ai has released a...

Threat actors are exploiting a chain of four vulnerabilities in Plex Media Server, dubbed Plex2Shell, to deploy cryptocurrency miners and reverse proxy software.A public...

Israeli spyware maker Candiru infected Al Jazeera devices through zero-click online ads, requiring no user interactionDiscover-Tech, an Israeli ad firm, acted as the front,...

Drupal core’s Field UI module contains a critical remote code execution vulnerability tracked as CVE-2026-108097, rated 19 out of 25 on Drupal’s risk scale.Fixes...

The GhostAction campaign expanded to more than 30,000 repositories and 3,000 users or organizations on Oct. 8 and 9, 2026.Attackers compromised roughly 1,900 GitHub...