Breaches, vulnerabilities, ransomware, and staying safe online.
Cloudflare disclosed that a bug in its GLM-5.3 AI model sent other customers' data to 155 over-long prompts — each arriving with…
Two critical PHP flaws forced governments to pull websites offline — and a follow-up advisory shows the patching race isn't over yet.
Microsoft says a China state-aligned group used AI agents to breach ~2,250 orgs via ConnectWise app credentials — at ~3,000 sign-in attempts…
A lone hacker let AI agents try more than 1,200 sites and break into over 100 company websites — for about $5,000…
Anthropic says Claude traced the NSA-supplied NIST ECDSA seeds to a 1990s clock-seeded generator in under 30 minutes - and it is…
Citizen Lab says an ad firm let spyware vendors infect chosen phones and computers the moment an ad loaded — no click…
CISA ordered federal agencies to patch four exploited flaws by October 17, led by a 9.8-rated hole in Cisco's email gateways.
Microsoft fixed a record 1,413 vulnerabilities in October's Patch Tuesday, including a Windows Shell zero-day already exploited in the wild.
The DOJ says North Korean IT workers used stolen U.S. identities and Texas laptop farms to infiltrate more than 70 American companies.
IonQ will acquire Zero Trust firm Elisity in an all-stock deal worth up to $1.3 billion, pairing post-quantum tools with a product.
iVerify found P7 DarkSword on a finance worker's iPhone: it steals keychain and crypto data on-device and polls its operators every 15…
A Telegram Desktop flaw let a crafted link steal session files and hijack accounts. It is fixed in 7.2.9 — here is…