The Cybersecurity and Infrastructure Security Agency (CISA) has released an alert to provide guidance in response to the ...

GitHub facades and Ethereum smart contracts power a March 2026 admin-targeted campaign, enabling resilient C2 rotation and ...

Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure ...

Collectively, the extensions amassed about 20,000 installs in the Chrome Web Store. All 108 extensions route stolen credentials, user identities, and browsing data to servers controlled by the same ...

How mature is your AI agent security? VentureBeat's survey of 108 enterprises maps the gap between monitoring and isolation — ...

Last week, something alarming happened in the world of software — and almost nobody outside the tech industry noticed. A widely-used software library called LiteLLM, downloaded over 95 million times ...

A severe cross-site-scripting (XSS) vulnerability in DNN, a popular open-source content management platform, allows attackers ...

The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) circulated a High Alert: Act Quickly ...

A newly disclosed security flaw in Axios, one of the most widely used HTTP client libraries in the JavaScript ecosystem, has raised concern across software and cloud security teams after official ...

The USGS Volcano Alert Level (ground-based hazards) and Aviation Color Code (airborne hazards) communicate Kilauea status and activity. After episode 44, which is forecast to begin between April 6-14, ...

Proof-of-concept exploit code has been published for a critical remote code execution flaw in protobuf.js, a widely used ...