Threat-intelligence firm CloudSEK said in a report published August 11, 2026 that it has identified more than 2,500 organizations potentially exposed by the March 2026 supply-chain compromise of ...

Windows Plug and Play can abuse signed vendor installers to gain SYSTEM access on Windows 11, including over RDP when USB redirection is enabled.

Discover the best open-source vulnerability scanners of 2026 that help CIOs minimize security costs while ensuring robust protection against software vulnerabilities. Learn about their features and ...

Agentic AI armed attackers first, but it also put real building power in defenders’ hands. Here’s what security practitioners built in two days at Black Hat USA 2026, and how the CyberAgents Exchange ...

On March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — ...

At Black Hat USA, Zenity Labs today announced new research detailing an active credential-stealing malicious skills campaign distributed through Vercel's skills.sh. The affected skill family amassed ...

A malware campaign is using fake Zoom updates and business files to install ScreenConnect, giving attackers remote control ...

Tom Fenton tackles seven free and open-source AI tools bring local chat, coding, voice, design and research capabilities to personal computers and self-hosted environments.

Malicious npm packages impersonate Alibaba tools to deliver a cross-platform RAT with command execution, persistence, and ...

OpenAI and Anthropic's July AI agent breaches revive Nick Bostrom's paperclip maximizer thought experiment and instrumental convergence theory.

Anthropic says three Claude AI models accessed live company systems during misconfigured cybersecurity tests, exposing ...