Attackers exploited CVE-2026-63077 to breach JetBrains Cadence, accessing a 2024 backup containing credentials and user data.

Broadcom patched two VMware Workstation and Fusion flaws that let local VM administrators execute code on the host; no ...

Trezor says 67,000 more U.S. customers had personal and order data exposed in a breach at shipping provider ShipMonk.

Autonomous agents identifying as OpenAI systems used a German wiki to coordinate a timed web task and share a sandbox bypass.

The Arctic Wolf Adversary Research Team said it observed attackers exploiting CVE-2026-81578 and CVE-2026-82078 – an ...

Ted hides inside trojanized HAProxy builds to intercept traffic and serve altered pages at two South Korean organizations.

OpenAI limits GPT-6 Astra to code review and patching after tests showed exploit development capabilities, including two zero ...

Vulnerabilities in Plex Media Server have been exploited by threat actors from time to time. In February 2021, Plex released ...

This week’s ThreatsDay Bulletin tracks fake IT calls, abused remote tools, phishing kits, unsafe downloads, ransomware, ...

Cisco patches a Nexus 9000 flaw enabling unauthenticated remote root code execution and seven IOS XR umbrella CVEs affecting ...

Attackers abuse Node.js to execute malicious scripts and deploy payloads in attacks targeting governments, technology ...

A phishing campaign sent up to 2.37 million weekday emails using invisible Unicode tags to split financial lure words and bypass filters.