Discover the top 7 open-source penetration testing tools tailored for DevOps teams in 2026. Enhance security and streamline testing within your Continuous Integration/Continuous Deployment (CI/CD) ...

Chinese-speaking hackers use AI-assisted tools and public exploits to automate attacks on vulnerable web servers at scale.

The Head Mare advanced persistent threat group has been exploiting unpatched TrueConf Server instances to distribute the ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. federal agencies to prioritize patching two ...

Head Mare hacktivist group exploiting critical TrueConf vulnerabilities CVE-2026-72529 and CVE-2026-72530 to deploy PhantomCore malware.

Cl0p claims over 40 organizations fell victim to attacks exploiting a PTC Windchill and FlexPLM vulnerability.

Russian state hackers are using a maximum-severity vulnerability in Microsoft Outlook’s Exchange Server to backdoor unpatched machines and steal credentials and other confidential information from ...

Security researchers at Searchlight Cyber have used OpenAI’s GPT5.6 Sol Ultra to successfully develop a full exploit chain for two critical WordPress Core vulnerabilities. The first vulnerability, ...

Bonzo Lend lost approximately $9.05 million after an attacker exploited a verification flaw in a third-party Supra oracle contract on the Hedera network. The attacker deposited low-value SAUCE tokens ...

Summer.fi has paused all Lazy Summer Protocol vaults following an exploit that resulted in the theft of approximately $6 million from the yield platform. The exploiter used a flash loan attack to ...

Wordfence blocked 17M+ attempts to exploit a Gravity SMTP bug that leaks API keys and system data from WordPress sites without authentication. Attackers are actively exploiting a vulnerability in the ...

Security research firm Paradigm Shift today published details of a new BootROM vulnerability affecting Apple's A12 and A13 chips, along with a working proof-of-concept exploit named "usbliter8." The ...