The PHP project is issuing emergency fixes for two critical "php2shell" RCE vulnerabilities (CVSS 9.2) as early attacks and ...

Storm-0940 used the agentic AI penetration testing framework to automate attacks and “reach more than 2,250 tenants at 2,900 sign-in attempts per minute,” Microsoft researchers said.

DHS has banned Chinese AI model DeepSeek across civilian federal agencies, ordering its immediate removal over data privacy ...

Russian military hacking group APT28 breached two NATO defense contractors and a law enforcement agency in a targeted cyber espionage campaign, Symantec reports.

Hundreds of customers are confirmed impacted, as attackers use a sensitive credential to break into connected Microsoft 365 ...

Researchers detect NSO Group's Pegasus spyware targeting prominent Serbian figures, including a university rector and a ...

The Justice Department arrested 28 California residents over alleged noncitizen voting, escalating federal efforts to ...

In its October Patch Tuesday, the tech giant addressed more defects in one month than any annual total on record. Nearly 4 in ...

Sen. Ron Wyden urges CISA and OMB to adopt Encrypted Client Hello across federal sites to shield whistleblowers and crisis ...

Researchers said the first known attack by Armory Castle, also known as UNC5221, occurred almost seven weeks ago. The threat ...

Proofpoint will acquire data security firm Varonis Systems in a $6.3 billion cash deal aimed at strengthening enterprise data ...

Federal agencies led by CISA and the NSA have released cybersecurity guidance urging frontier AI developers to harden sandbox ...