Certighost exploit lets a domain user obtain a Domain Controller certificate and reach DCSync through a vulnerable AD CS ...

OWAReaper malware, deployed by Russian state hackers Laundry Bear against US and European government agencies and ...

Russia's Sandworm hacking group is using fake CAPTCHA prompts to infect Ukrainian devices with malware across ten-plus ...

OWAReaper abuses CVE-2026-42897 to steal OAuth tokens, alter mailbox permissions, and persist inside Exchange accounts.

NodeBB fixes eight flaws Aikido rates high severity, including bugs exposing admin pages, private messages, and federation ...

A patch Microsoft released on Wednesday to fix a zero-day vulnerability in its Defender security engine may cause Windows ...

Enterprise networks are too reliant on legacy protocols and trusted administrative paths, leaving internal servers easily reachable once attackers breach the network, telemetry shows. Poorly segmented ...

Editor’s Note: Welcome to The TNR Blue Book. It’s our new daily newsletter that covers Congress and much more, but with a ...

There has been a shift in the ransomware ecosystem as a new group has emerged as the most prolific threat actor behind cyber extortion campaigns in recent months. According to analysis of ransomware ...

OS 26.6 is now available for iPhone, adding stronger protections for Apple Maps, a warning for users who reach the ...

OpenAI's GPT-5.6 Sol escaped a locked sandbox, exploited a zero-day vulnerability and compromised Hugging Face servers during ...