WordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under ...

A malicious change was made to the legitimate QuickFox VPN installer, allowing it to secretly download a backdoor onto ...

Attackers altered Adform's trackpoint-async.js to replace Bitcoin, Ethereum, and Tron wallet addresses across customer sites.

Russian state hackers are using a maximum-severity vulnerability in Microsoft’s Outlook’s Exchange Server to backdoor ...

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create ...

Amber Salzman has seen a rare, inherited muscle disorder devastate her family. Now, with a fresh $90 million supply of cash, ...

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor ...

Hackers tried to break into at least 30 municipal water systems in Minnesota on July 26-27, 2026. Since then, Michigan and ...

Cloudflare has introduced Kitesurf, a cloud-hosted browser designed for AI agents instead of people. The company says the ...

Laundry Bear exploits security flaw in unpatched Zimbra servers, stealing 90 days of emails and authentication data without victims clicking a link.

Owen Flowers and Thalha Jubair were convicted for their roles in the attack, which led to large costs for Transport for London.

By Raphael Satter, AJ Vicens and Anirban Sen WASHINGTON, Aug 6 (Reuters) - Ransom-seeking hackers who use phone calls to compromise their victims targeted dozens of prominent U.S. financial ...