A critical vulnerability in the Ninja Forms File Uploads premium add-on for WordPress allows uploading arbitrary files without authentication, which can lead to remote code execution.

Iranian-linked hackers are targeting Internet-exposed Rockwell/Allen-Bradley programmable logic controllers (PLCs) on the networks of U.S. critical infrastructure organizations.

Over a dozen companies have suffered data theft attacks after a SaaS integration provider was breached and authentication ...

Hackers are exploiting a maximum-severity vulnerability, tracked as CVE-2025-59528, in the open-source platform Flowise for ...

An international operation from law enforcement authorities in partnership with private companies has disrupted FrostArmada, ...

A new attack, dubbed GPUBreach, can induce Rowhammer bit-flips on GPU GDDR6 memories to escalate privileges and lead to a ...

Microsoft says that Storm-1175, a China-based financially motivated cybercriminal group known for deploying Medusa ransomware ...

The Federal Police in Germany (BKA) has identified two Russian nationals as the leaders of GandCrab and REvil ransomware ...

Microsoft has resolved a known issue that was preventing some Classic Outlook users from sending emails via Outlook.com.

The Drift Protocol says that the $280+ million hack it suffered last week was the result of a long-term, carefully planned ...

Microsoft has deprecated and removed the Support and Recovery Assistant (SaRA) command-line utility from all in-support ...

Exploit code has been released for an unpatched Windows privilege escalation flaw reported privately to Microsoft, allowing ...