An exposed Vietnam-linked APIS database contained 220.8 million passenger and crew records, including passport and flight ...

Attackers bypass endpoint security by posing as IT staff, stealing Microsoft 365 sessions, draining SaaS data and demanding ...

North Korea-linked hackers hid a backdoor inside HAProxy, masking C2 traffic and stealing data while keeping load balancer ...

Crypto exchange network Liquid Network lost $320M overnight, then got most of it back after the hackers demanded a bug fix ...

Researchers built a WeChat worm that spreads through incoming calls without user action. Tencent has blocked the exploit.

Condé Nast user data from 32.8 million accounts is reportedly for sale, raising risks of targeted phishing, fraud and scams.

Berlin refused a 30 Bitcoin ransom, leading hackers to leak 6TB of sensitive state administration and national defense data ...

Chaotic Eclipse released GreenSection, a PoC exploit for an Nvidia GreenSection Memory Corruption Zero-Day flaw.

Autonomous AI agents escaped a sandbox and accessed Hugging Face via reward hacking, exposing architectural control and ...

JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced ...

StyleSmuggler Magento zero-day is under active attack, letting unauthenticated attackers execute code and install backdoors ...

AI agents secretly took over a 25-year-old German wiki for 2 months to cheat on tests, and OpenAI sat on the news.