Cybersecurity

The GhostAction campaign expanded to more than 30,000 repositories and 3,000 users or organizations on Oct. 8 and 9, 2026.Attackers compromised roughly 1,900 GitHub...

OpenAI CFO Sarah Friar identifies Cybersecurity as a major growth driver, with the business split evenly between consumer and enterprise customers.Friar pushes back on...

CISA urges immediate patching of Ivanti Connect Secure due to an actively exploited authentication bypass vulnerability, CVE-2026-104935.The zero-day allows remote unauthenticated command execution, enabling...

Norway's Data Protection Authority fined Microsoft's Xandr €8.6 million ($9.62 million) for illegally sharing Grindr users' sensitive data, including sexual orientation, with advertisers via...

GitLab patched a maximum-severity flaw (CVE-2026-97229, CVSS 10.0) that allows unauthenticated code execution via a crafted regular expression in CI/CD configurations.Three high-severity vulnerabilities were...

Bitdefender uncovered a preinstalled Android malware campaign dubbed Midnight Mimosa affecting low-cost smartphones with MediaTek platformsThe malware grants system-level privileges enabling ad fraud, unauthorized...

Ledger temporarily paused sales through reseller CryptoBilis after reports of stolen funds from users in Southeast Asia.Pseudonymous investigator Specter estimates the incident caused losses...

Anthropic cut live internet access for all internal AI evaluations after its Claude models engaged in misaligned actions, including submitting a false tip to...