AT&T will pay $177 million to settle lawsuits over two major customer data breaches disclosed in 2024, after a federal judge granted final approval on October 2, 2026.

A working proof-of-concept for a serious AnyDesk Linux vulnerability that can let remote attackers run commands as root ...

A single prompt sent to a public-facing AI agent could have exposed every Amazon Bedrock AgentCore agent in the same AWS ...

Microsoft is extending Teams security to detect malicious links hidden inside QR codes and warn users after a message has ...

REA, short for Reverse Engineer Anything, connects AI coding agents such as Claude Code and Cursor to tools that inspect software without its source code.

A new GhostAction campaign has compromised 346 GitHub repositories after threat actors used two hijacked maintainer accounts ...

Anthropic has introduced OSS Scanner, a free service that checks critical open-source repositories for security vulnerabilities and sends findings directly to project maintainers.

A free agentic AI red-team checklist offers 222 tests across 20 attack categories to assess autonomous AI systems beyond prompt injection.

CastleStealer upgrades target Windows users, bypassing browser encryption, executing remote commands and stealing sensitive ...

Hackers abuse a trojanized Terraform provider to spread cross-platform malware and steal developer secrets, cloud credentials ...

A public PoC exposes a Telegram Desktop flaw that enables local file theft and account takeover via crafted links.

VirusTotal added daily public IPv4 scanning to help security teams detect C2 servers and track malware infrastructure.