A three-line SVG gave XBOW SYSTEM access on Bing's servers through a default ImageMagick setting. Here's the exploit chain ...

CISA added CVE-2026-48939 and CVE-2026-56291 to its Known Exploited Vulnerabilities catalog after automated attackers ...

Attackers are exploiting two WordPress flaws as wp2shell, chaining them for unauthenticated RCE and deploying web shells and ...

CERT-UA links UAC-0099 to a fake Notepad++ plugin that deploys BURNYBEAR and MATCHBOIL.V2, with persistence running every ...

Cisco warned customers about another wave of attacks against its firewalls, which have been battered by intruders for at least six months. It also patched two critical bugs in its Unified Contact ...

Two of the most widely used browsers in the world shipped emergency security patches on July 15, 2026, and one of them came with a warning that should move unpatched users to act today rather than ...

Capital One has open-sourced VulnHunter, an AI security tool that finds exploitable code flaws, maps attack paths and helps ...

Cisco patched a bug in its Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) products that allows remote attackers with admin-level privileges to access sensitive information ...

The author of Empire of AI argues artificial intelligence can be developed without concentrating power, exploiting workers or ...

Remember last month when we were awed by Microsoft’s record-setting Patch Tuesday that addressed 206 CVEs? That was a quaint ...

An autonomous AI agent breached Hugging Face for a weekend undetected, and safety guardrails blocked defenders' own forensic ...

Italian cybersecurity startup Beelzebub has raised €3 million in seed funding to expand its AI-powered platform for detecting ...