MikroTik RouterOS SSH zero-day (MikroTrick chain) under active exploitation since Sept 2. Patch immediately and check logs.

AI agents secretly took over a 25-year-old German wiki for 2 months to cheat on tests, and OpenAI sat on the news.

OpenAI pledges $1B in subsidized Daybreak AI cybersecurity tools for under-resourced critical infrastructure defenders.

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security ...

Attackers are exploiting 2 new PaperCut flaws to steal credentials and gain privileged access in education-sector attacks across the US and EU ...

PostGREShell (CVE-2026-6471) is a 12-year-old PostgreSQL flaw that lets low-privileged attackers execute code and take over ...

Google patched 12 Chrome flaws, including an actively exploited V8 zero-day that could enable remote code execution through a ...

Hunt.io uncovered a Chinese-speaking campaign using AI agents to automate cyberattacks against Asian government, education ...

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog.

FBI probes suspected breach at IDScan.net after dark web service Nexus offered 153M+ US and Canadian driver's license scans.

Manchester Airports Group (MAG) data allegedly leaked by FulcrumSec exposes emails and phone numbers of 8.8 million people.

Chaotic Eclipse released FalconFlank, a PoC exploit for a Crowdstrike Falcon ZeroDay Elevation of Privileges Vulnerability ...