Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.

Genesys says it has contained a cyberattack that resulted in unauthorized access and theft of data from its LMS and CRM environments.

Industrial vendors including Siemens, Schneider Electric, ABB and Johnson Controls have published PHP2Shell security advisories.

Since July 2025, a threat actor has injected a JavaScript loader into 953 online stores, most of them running Magento, Sansec ...

Two suspects were arrested in the Netherlands for stealing over $400,000 in a new type of bank helpdesk fraud.

Mave has emerged from stealth with $34 million in seed and Series A funding to build an agentic SecOps platform for enterprises.

Mirai botnet operators target PHP2Shell and VulnCheck bypasses ASLR, yet no successful PHP2Shell compromise has been ...

Private keys for eight eMudhra intermediate certificates were compromised, and root programs and trust stores are blocking ...

PHP2Shell refers to two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, that could lead to unauthenticated ...

CyberSN’s jobs report shows US cybersecurity job postings fell 26% in January–September 2026, while AI Security Engineer ...

China-linked Storm-0940 used Artex in AI-powered attacks targeting hundreds of organizations in a recent ConnectWise campaign.

Quest Diagnostics said it learned of a cyber breach of one of its systems this week, likely compromising some records for patients.