Microsoft has announced mitigations for CVE-2026-45585, a BitLocker bypass triggered via FsTx in Windows Recovery.

Anthropic has silently patched a vulnerability that would have allowed an attacker to bypass the Claude Code network sandbox.

GitHub has confirmed that roughly 3,800 internal repositories were hacked after an employee installed an infected VS Code ...

A fresh Mini Shai-Hulud supply chain attack has hit over 320 NPM packages, along with GitHub Actions and a VS Code extension, ...

Threat Detection & Incident Response Summit explores tools, strategies, and frameworks needed to build a resilient ...

How security organizations can manage the rapid progression of AI applications moving from the experimentation phase into ...

The B1ack’s Stash dark web carding marketplace has released 4.6 million stolen credit card records as a free download.

Drupal is warning users that it’s preparing a patch for a ‘highly critical’ vulnerability that may be exploited shortly after ...

Verizon’s 2026 DBIR shows vulnerability exploitation was the top breach vector in 2025 as AI accelerated attacks, ransomware ...

Microsoft has disrupted the Fox Tempest cybercrime service that has been helping threat actors distribute ransomware and ...

Attackers are increasingly abusing Microsoft’s legacy MSHTA utility to silently deliver malware, stealers, and persistent ...

An unpatched vulnerability in ChromaDB could be exploited without authentication for remote code execution and server ...