OpenAI terminated three safety researchers for violating the company's policies on accessing and handling sensitive information, according to The Wall…

Spanish police arrested a 16-year-old on September 30 whom they suspect of operating the KillSec ransomware group. The arrest was part of a coordinate…

A high-severity vulnerability in TDengine, a time-series database deployed across industrial, IoT, energy, and automotive sectors, allows attackers to…

Citrix NetScaler devices have become active targets for post-exploitation abuse. Threat actors exploiting a pre-authentication command injection vulne…

Attackers actively exploit a critical Zimbra Collaboration Suite vulnerability to install web shells and extract authentication credentials from compr…

Attackers are weaponizing legitimate remote management tools in a multi-stage infection chain that chains MSP360 and ScreenConnect to establish persis…

Mandiant Consulting and Google Threat Intelligence Group identified unknown threat actors exploiting a newly patched Citrix NetScaler vulnerability to…

OpenSSL released patches on September 29 for a high-severity vulnerability in its DTLS (Datagram TLS) implementation that leaks unencrypted heap memor…

Threat actors have weaponized custom GPTs, the application layer built on OpenAI's ChatGPT platform, to distribute remote access trojans (RATs) to uns…

The White House reached a voluntary agreement with major technology companies to establish safety guardrails for advanced artificial intelligence syst…

# AI Lifts SOC Job Satisfaction While Creating a Two-Tier Workforce Problem Security operations centers are experiencing a fundamental shift in how a…

Cisco disclosed active exploitation of CVE-2026-76504, a critical authentication bypass affecting Cisco Catalyst SD-WAN Manager, in a security advisor…

Threat actors are weaponizing OpenAI's Custom GPTs feature to launch Remote Access Trojan (RAT) attacks against unsuspecting users. Security researche…

# Browser-Based Attacks Dominate 2026 Threat Landscape Attackers are shifting focus to the browser as their primary infection vector, capitalizing on…

# AI Coding Agents Leak 13,000 Internal Images to Public GitHub Repositories Security researchers at Glow uncovered a widespread data exposure proble…

A coordinated phishing campaign targeting U.S. executives has stolen Microsoft 365 session tokens and deployed remote monitoring and management (RMM) …

Russia's Star Blizzard hacking group has shifted away from ClickFix phishing campaigns to deploy a new attack method called RedFlick against Ukrainian…

South Africa's air traffic control systems faced a serious cyberattack that deployed ransomware on operational networks, prompting the country to seek…