The actively exploited zero-day bug — and the one therefore that needs high-priority attention — is CVE-2025-62221, which ...

Joseph Rooke, director of risk insights at Recorded Future's Insikt Group, points out that "nations are clearly watching this ...

Google has fixed a critical vulnerability that enabled attackers to add malicious instructions to common documents to ...

Broadside' is targeting a critical flaw in DVR systems to conduct command injection attacks that can hijack devices for ...

Shanya is the latest in an emerging field of packing malware, selling obfuscation functionality in order to help ransomware actors reach their target.

The Apache Software Foundation's earlier fix for a critical Tika flaw missed the full scope of the vulnerability, prompting ...

The US Treasury's Financial Crimes Enforcement Network shared data showing how dramatically ransomware attacks have changed ...

Attacks against CVE-2025-55182, which began almost immediately after public disclosure, have increased as more threat actors ...

Shadow AI is spreading across enterprises. Rather than fight it, organizations should see it as a catalyst for stronger AI ...

State-sponsored actors tied to China continue to target VMware vSphere environments at government and technology ...

Global cybersecurity agencies published guidance regarding AI deployments in operational technology, a backbone of critical ...

The deal, believed to be valued at $1 billion, will bring nonhuman identity access control of agents and machines to ...