Cybersecurity

The U.S. Department of Justice seized the domain of bulletproof hosting provider Virtualine, alleging it facilitated child sexual abuse material distribution and international money...

Apple backported a high-severity patch for CVE-2026-86950, an out-of-bounds write in CoreGraphics exploited in targeted attacks.The vulnerability previously addressed in iOS 26.7.1 and macOS...

The Australian Signals Directorate (ASD) disrupted a major Amadey malware operation, severing the criminal's access to 180,000 infected computers worldwide.ASD gained access to the...

Over 950 online stores, primarily running Magento, have been infected since July 2025 in a campaign that injects malicious JavaScript via CMS blocks.The threat...

Wasmtime patched two critical sandbox escapes, both rated 9.9.One flaw affects only ARM64; no attacks reported.Updates: 36.0.19, 48.0.7, 49.0.4, and 50.0.0. Two critical flaws in...

Attackers stole 497 Microsoft 365 sign-in tokens across 79 organizations using adversary-in-the-middle relays, compromising 97 accounts.The threat actors replayed stolen tokens instead of guessing...

Google updated its privacy policy to allow personalized ads based on data from connected services like Gmail and Photos when users enable Personal Intelligence...

CISA added two critical vulnerabilities to its Known Exploited Vulnerabilities catalog, citing active exploitation targeting cryptocurrency wallets.The flaws affect Collabora Online CODE Server (CVSS...