A high-severity React Server Components DoS flaw lets attackers freeze vulnerable Next.js servers with crafted POST requests.

Public PoC released for CVE-2026-102489, a critical Zammad flaw enabling unauthenticated session cookie theft and potential code execution.

Citrix has urged customers to patch a critical security flaw in NetScaler ADC and NetScaler Gateway that could allow remote code execution or cause a denial of service. Tracked as CVE-2026-107406, the ...

An AI-powered hacking tool helped breach South Korean financial firms, exposing customer and employee data across multiple ...

GreyNoise has identified a rise in scanning and remote code execution attempts targeting video surveillance devices in Ukraine between September 21 and October 1, 2026.

GhostAction compromised 772 GitHub repositories using fake workflows to steal CI/CD secrets, cloud keys, tokens and ...

DarkSword operators use Coruna malware to steal iPhone crypto wallet recovery phrases, with exposed servers revealing theft ...

Cisco patched three critical NX-OS NGOAM flaws enabling unauthenticated remote root code execution and service disruption.

A serving Royal Navy member has been charged with spying for an unnamed foreign country after an investigation by Counter ...

Anthropic launched its Anthropic Cyber Mission on October 8, 2026, to help security teams protect critical infrastructure and open-source software.

A malicious Tensorlake npm release carries a Shai-Hulud worm variant that steals developer secrets and spreads through ...

Splunk patched critical CVE-2026-76268, allowing unauthenticated OS command execution via the Patroni REST API.