New malware abuses DoFun Android head unit updaters to deliver JarService, run ad fraud, and download the Zhima reverse proxy ...

TikTok will pay $400 million to settle a U.S. child privacy case alleging COPPA violations involving users under 13 and Kids ...

Attackers exploit CVE-2026-73570 on Zimbra servers with zimbra-snmp installed and SNMP notifications enabled, allowing ...

Microsoft says CVE-2026-69836, a CVSS 10.0 Entra ID RCE flaw, has been exploited in the wild but is fully mitigated with no ...

Trojanized npm packages launch RedC2 4.0 on Linux at import time, giving operators shell access, credential theft, and ...

U.S. agencies warn AI-generated exploit scripts target Siemens S7 PLCs, with exposed, outdated devices at risk across ...

GitLab CVE-2026-19478 is under active exploitation, with unauthenticated attacks able to modify or delete public projects ...

Zombie Card rewrites Visa NFC expiry data in transit, reviving expired cards at one tested U.S. bank without breaking card ...

Manic Android malware targets 169 apps and can relay collected data through nearby infected devices when the source phone is ...

A Meta AI agent exposed sensitive company and user data to unauthorized employees for over two hours, triggering a Sev 1 ...

Adversa says encrypted prompt injection can make Grok send a user's name, location, tier, and chat prompts to an ...

CISA adds four critical flaws to KEV after active exploitation, with FCEB agencies ordered to patch by August 21, 2026 ...