Cybersecurity

PortSwigger's AI system, HTTP Terminator, autonomously generated and validated novel HTTP desynchronization attacks after exploring 30,000 candidate vectors.The research identified roughly 700 vulnerable targets...

Cisco disclosed multiple critical vulnerabilities in Catalyst SD-WAN and IOS XE Software, discovered during internal security testing using frontier AI models.The flaws include improper...

Cybersecurity researchers Talal Haj Bakry and Tommy Mysk disclosed a WebKit vulnerability that bypasses Apple's iCloud Private Relay.Three specific features in WebKit—DNS prefetching, WebAuthn,...

Maksim Silnikau, a Belarusian national, was sentenced to 16 years in prison for running the Ransom Cartel ransomware-as-a-service operation.The scheme targeted at least 18...

A macOS ClickFix campaign uses over 250 front-end domains to deliver information-stealing malware to targeted users.The attack employs a server-side fingerprinting gate that hides...

CISA added three actively exploited vulnerabilities to its KEV catalog on August 5, 2026Critical Langflow code injection flaw (CVE-2026-9198, CVSS 9.8) enables unauthenticated remote...

Pillar Security discovered a prompt-injection attack that could trick Google's ADK triage agent into triggering a privileged code-fixing workflow.By exploiting a public GitHub issue,...

An unknown Chinese threat actor is targeting iOS devices using a publicly leaked version of the DarkSword exploit kit.Over 100 malicious web properties, mostly...