Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.

Security researchers have disabled an abandoned Popcorn Time updater on 2 million systems to prevent malicious abuse.

Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific ...

A cybersecurity incident at the University of New Mexico Health System forced it to send ambulances to other hospitals.

Anthropic filed papers for what could be the biggest IPO of stock ever as its top executive warns AI could pose an ...

Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

Honeypot data shows attackers successfully exploiting the PHP2Shell vulnerabilities to execute shell commands on PHP servers.

Anthropic says Mythos 5’s behavior in AISI’s July evaluation was severe, as it used fake identities to submit malicious code ...

Two suspects were arrested in the Netherlands for stealing over $400,000 in a new type of bank helpdesk fraud.

Genesys says it has contained a cyberattack that resulted in unauthorized access and theft of data from its LMS and CRM environments.

Industrial vendors including Siemens, Schneider Electric, ABB and Johnson Controls have published PHP2Shell security advisories.

Since July 2025, a threat actor has injected a JavaScript loader into 953 online stores, most of them running Magento, Sansec ...