Cybersecurity

Threat actors are exploiting a chain of four vulnerabilities in Plex Media Server, dubbed Plex2Shell, to deploy cryptocurrency miners and reverse proxy software.A public...

Israeli spyware maker Candiru infected Al Jazeera devices through zero-click online ads, requiring no user interactionDiscover-Tech, an Israeli ad firm, acted as the front,...

Drupal core’s Field UI module contains a critical remote code execution vulnerability tracked as CVE-2026-108097, rated 19 out of 25 on Drupal’s risk scale.Fixes...

The GhostAction campaign expanded to more than 30,000 repositories and 3,000 users or organizations on Oct. 8 and 9, 2026.Attackers compromised roughly 1,900 GitHub...

OpenAI CFO Sarah Friar identifies Cybersecurity as a major growth driver, with the business split evenly between consumer and enterprise customers.Friar pushes back on...

CISA urges immediate patching of Ivanti Connect Secure due to an actively exploited authentication bypass vulnerability, CVE-2026-104935.The zero-day allows remote unauthenticated command execution, enabling...

Norway's Data Protection Authority fined Microsoft's Xandr €8.6 million ($9.62 million) for illegally sharing Grindr users' sensitive data, including sexual orientation, with advertisers via...

GitLab patched a maximum-severity flaw (CVE-2026-97229, CVSS 10.0) that allows unauthenticated code execution via a crafted regular expression in CI/CD configurations.Three high-severity vulnerabilities were...