For the first time, a machine has topped HackerOne’s global rankings. An AI named XBOW is finding more bugs than humans, signaling a new era in security.

Threat actors are weaponizing RMM tools like Atera and Splashtop via fake OneDrive phishing emails. Learn how this sophisticated attack works and how to protect yourself.

Google releases critical Android security updates, patching two actively exploited Qualcomm flaws. CISA has added them to its KEV catalog. Update your devices now.

A new study shows that with minimal guidance, even untrained users can be effective at detecting malware. The human element is a cybersecurity asset.

A new social engineering scam called ClickFix is surging. It bypasses downloads by tricking users into pasting malicious code to "fix" a fake issue.

A critical flaw dubbed "MCPoison" in the AI code editor Cursor allowed attackers to execute code remotely. The bug highlights a major AI security risk.

Critical vulnerabilities in Broadcom's ControlVault chip, found in 100+ Dell laptops, allow attackers to bypass OS-level security and steal sensitive data.

CISA adds old D-Link camera flaws to its KEV catalog, warning they are actively exploited. Update your devices or decommission them immediately.

Adobe issues an urgent security update for AEM Forms, addressing critical vulnerabilities that could allow unauthenticated remote code execution. Patch your systems now.

Ubiquiti has issued an advisory for a critical flaw (CVE-2025-24285, CVSS 9.8) in its UniFi Connect EV Stations, allowing remote command injection and unauthenticated RCE.

OpenAI has scheduled a livestream for August 8, with a teaser on X hinting at the formal unveiling of its next-generation model, GPT-5, expected to bring significant advancements in reasoning and logic.

Apple commits an additional $100 billion to US industries, bringing its total investment to $600B. The move is a strategic response to new 25% tariffs on goods from India.

The latest iOS 26 beta introduces new AirPods low-battery alerts and an updated color-coded guide for the charging case's LED, making it easier to monitor status.

OpenAI will provide ChatGPT to over 2 million US federal employees for just $1 per agency, per year, a symbolic price to secure dominance in government AI.

Google confirms a June Salesforce breach by UNC6040 (ShinyHunters). The attack used social engineering to steal credentials, a tactic also used against Chanel and Allianz.

A new ChatGPT feature exposed over 100,000 private conversations to search engines. The links remain accessible on the Internet Archive and elsewhere.

Microsoft warns of a critical flaw (CVE-2025-53786) in Exchange hybrid environments, allowing attackers with on-prem admin access to escalate privileges in Exchange Online.

Hey there!😁

A beginner-friendly guide to exploiting misconfigured HTTP method handling for privilege escalation.

Discover how hackers exploit SQL Injection (SQLi), Command Injection, and Cross-site Scripting (XSS). This guide explains where to look…

Learn how attackers exploit stored XSS vulnerabilities to capture login credentials and compromise user accounts.