Citizen Lab has uncovered AdFection, an operation delivering Candiru spyware via malicious ads, in zero-click attacks.

ICS-Sniper attack picks off critical OT traffic, XWorm operators’ panels open to takeover, and AI-aided Chrome exploit earns $250,000.

Chinese APT Armory Castle exploited a BeyondTrust vulnerability tracked as CVE-2026-102764 as a zero-day since August.

OpenAI’s AI models asked to look up public data instead broke into the live systems, forging tokens and exfiltrating non-public records ...

Security and application delivery firm F5 announced fixes for 11 security defects in NGINX. Among them, CVE-2026-15176 and ...

Microsoft has rolled out fixes for over 30 vulnerabilities, including two dozen high-severity remote code execution bugs in ...

Proofpoint announced a definitive agreement to acquire data security company Varonis for $6.3 billion in an all-cash ...

A cyber incident at defense contractor BAE Systems has halted federal bankruptcy notices and creditor services across US ...

See how contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.

The UK’s Legal Aid Agency has confirmed that records dating back to 1978 were stolen in an April 2025 data breach.

Copeland and Dixell controllers were also hit in the supermarket refrigeration attack, which affected 700 stores and remains ...

Delivered via phishing, the malware provides reconnaissance, remote execution, and data exfiltration capabilities.