LAS VEGAS—Some attacks have no defense. What appears to be a simple message can invisibly infiltrate your mobile device, even if you never open it. Suddenly, your phone is leaking all of your personal ...

Google says that a bug in its Pixel smartphones’ software was exploited in limited and targeted cyberattacks. The company said Tuesday that the bug, tracked as CVE-2026-58704, has now been patched.

Indirect prompt injection is possible on AI-powered dashboards, allowing exfiltration of sensitive enterprise data without user authentication. Security researchers are warning about a critical ...

WeChat zero-click worm WeWorm, built by AI in roughly 10 days, exploited a VoIP memory corruption flaw to hijack accounts on over 1.4 billion iPhones and Android devices. Calif reported the bug to ...

A critical vulnerability chain in the popular Avada theme for WordPress can be exploited by an unauthenticated attacker to execute arbitrary PHP code on the server. The exploit chains six security ...

Apple is urging users to update after patching a CoreGraphics vulnerability that attackers have already exploited against ...

Most pre-order scams rely on social engineering to trick you into entering personal details or payment information, but this fake Apple site operates differently. It mimics Apple’s official website ...