A critical vulnerability in mcp-remote (CVE-2025-6514) allows remote code execution, affecting 437,000+ users.

A cryptocurrency social engineering campaign uses fake AI and gaming companies to deliver malware on Windows and macOS, ...

Four individuals were arrested in connection with £440M cyber attacks on Marks & Spencer, Co-op, and Harrods, linked to the ...

U.S. companies are using generative AI, raising concerns about data privacy, compliance, and operational risks.

AMD reveals new Transient Scheduler vulnerabilities in CPUs, exposing sensitive data risks across multiple Ryzen and EPYC ...

The altered app packs in two extra executables within Termius Helper.app, a loader named ".localized" that's designed to ...

ServiceNow's CVE-2025-3648 flaw exposes sensitive data across multiple tables, impacting all users with misconfigured ACLs.

The IT worker scheme, also tracked as Nickel Tapestry, Wagemole, and UNC5267, involves North Korean actors using a mix of ...

Gold Melody uses ASP.NET vulnerabilities for long-term access, impacting various industries across Europe and the U.S.

Anatsa banking malware targets North American users via Google Play, leading to credential theft and financial fraud ...

Hackers are exploiting Shellter’s leaked Elite license to distribute Lumma Stealer, SectopRAT, and more. This affects ...

"Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a ...