U.S. agencies warn AI-generated exploit scripts target Siemens S7 PLCs, with exposed, outdated devices at risk across ...

Adversa says encrypted prompt injection can make Grok send a user's name, location, tier, and chat prompts to an ...

Cybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major content delivery networks ...

Zombie Card rewrites Visa NFC expiry data in transit, reviving expired cards at one tested U.S. bank without breaking card ...

Attackers exploit CVE-2026-73570 on Zimbra servers with zimbra-snmp installed and SNMP notifications enabled, allowing ...

Manic Android malware targets 169 apps and can relay collected data through nearby infected devices when the source phone is ...

Firefox extensions pose as Web3 products to steal recovery phrases, private keys, keyrings, credentials, and clipboard data.

Elementor Pro CVE-2026-32475 lets unauthenticated attackers bypass file checks and upload PHP for remote code execution.

A Meta AI agent exposed sensitive company and user data to unauthorized employees for over two hours, triggering a Sev 1 ...

ToxicPanda 2.0 adds 167 remote commands, targets 349 financial institutions, and uses Android accessibility to harvest PINs.

NASA AIT-GUI flaws could let unauthenticated attackers issue spacecraft commands; version 2.5.2 limits exposure but still ...

OpenAI pauses frontier RL training for two weeks, keeps its largest planned run on hold, and adds stricter monitoring and ...