A study of 367,000 ships finds global GPS spoofing, including Red Sea activity detected months before the MSC Antonia grounding in May 2025.

International police dismantle the KillSec ransomware group, arresting a 16-year-old suspected admin and seizing five servers and 110TB of stolen data.

The most compelling element of this novel cyberattack resides not upon a disparate phishing domain, but directly within the authentic ChatGPT interface. Huntress unveiled a sophisticated campaign …

Artificial intelligence has begun to exert a profound influence, accelerating the velocity of vulnerability discovery and fundamentally altering the nature of the identified flaws. Researchers at …

Authlib fundamentally exists to distinguish authenticated, trusted data from malicious forgery. However, a meticulously crafted JSON Web Signature (JWS) enables attackers to bypass this critical v…

A solitary, glaring omission in cryptographic verification granted a 16-year-old student administrative dominion over a critical internal analytical platform at Microsoft. This infrastructure unde…

Spectre has unequivocally discovered a novel infiltration vector precisely where applications dynamically compile code into machine instructions during runtime. The esteemed VUSec team, a collabor…

TL;DR TP-Link published four security advisories on October 1, 2026, covering seven TP-Link vulnerabilities. The worst, CVE-2026-102369, scores 8.7 on CVSS 4.0 and lets a local attacker run comman…

TL;DR Moxa disclosed two Moxa MGate vulnerabilities on October 2, 2026. The worse flaw, CVE-2026-86325, scores 9.4 on CVSS 4.0 and lets a read-only user corrupt device memory. The second, CVE-2026…

CVE Watchtower tracks new CVEs for the specific vendors and products you choose, scores them for severity and real-world exploitation, and emails you the moment one matters. This guide walks throu…

TL;DR Full technical details and a proof-of-concept are now public for CVE-2026-85714, a CVSS 9.1 Stirling PDF RCE flaw. An authenticated admin can upload a crafted database file and run commands …

For those closely monitoring the trajectory of artificial intelligence, OpenAI appears to be encountering profound difficulties in controlling its proprietary creations. Moreover, compounding this…

At a Glance Attribute Details Actor or Group UAT-11587 (suspected China-nexus group; overlaps with Jewelbug) Activity Type Cyberespionage, spear-phishing, DLL sideloading, dead-drop C2 Targets or …

At a Glance Summary Attribute Details Actor or Group TA419 (China-aligned cyberespionage group) Activity Type Spear-phishing, AitM credential theft, persona impersonation Targets or Victims US art…

At a Glance Summary Attribute Details Actor or Group Unattributed cybercrime operators Activity Type Phishing, dual RMM deployment, living-off-the-land access Targets or Victims Enterprise network…