The criminals used a mix of new (AI) and old (stolen credentials) tooling during their data-theft spree, and in some cases ...

A high-severity flaw could expose AI training data, model artifacts, and cloud credentials when a crafted model configuration ...

An out-of-bounds write in Google’s Brotli decoder affects multiple software ecosystems, prompting security updates for .NET, ...

CISA has added the Node2Shell flaw, tracked as CVE-2026-111497, to its Known Exploited Vulnerabilities catalog. Attackers are ...

KongTuke is a criminal web traffic network behind fake CAPTCHA pages and the CrashFix browser extension scam on Windows. What ...

Measuring the cybersecurity of AI models gets complex fast, with metrics focused on different variables in the AI security ...

IBM chains a superuser token leak with a code validator that runs Python in CVE-2026-9198. CISA logged exploitation on 4 ...

A security firm patched a decade-old app to prevent takeover of millions of machines, highlighting that abandoned domains ...

Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Patrick Gray and Amberleigh Jack. This week's edition is sponsored by Nebulock. You can hear a podcast discussion ...

See the 4 AdvaMed data access principles for 2026: who owns device data, how to share it, and what to fix before your next ...

This week delivered critical firewall patches, rented banking malware, weaponized PDFs, and zero-permission token theft alongside supply-chain hijacks and AI-powered attacks. Attackers borrowed trust ...

SilentNet is a stealer family tracked on MalwareBazaar, mostly Java .jar files. See what is known, what is not, and how to ...