Industrial vendors including Siemens, Schneider Electric, ABB and Johnson Controls have published PHP2Shell security advisories.
Genesys says it has contained a cyberattack that resulted in unauthorized access and theft of data from its LMS and CRM environments.
Since July 2025, a threat actor has injected a JavaScript loader into 953 online stores, most of them running Magento, Sansec ...
Two suspects were arrested in the Netherlands for stealing over $400,000 in a new type of bank helpdesk fraud.
Microsoft, Node.js, and Python package maintainers have patched Node2Shell (CVE-2026-111497), a critical Brotli decoder flaw.
Mave has emerged from stealth with $34 million in seed and Series A funding to build an agentic SecOps platform for enterprises.
Mirai botnet operators target PHP2Shell and VulnCheck bypasses ASLR, yet no successful PHP2Shell compromise has been ...
China-linked Storm-0940 used Artex in AI-powered attacks targeting hundreds of organizations in a recent ConnectWise campaign.
Arista has patched CVE-2026-114625, a critical SQL injection flaw in VeloCloud Orchestrator exploited as a zero-day.
Quest Diagnostics said it learned of a cyber breach of one of its systems this week, likely compromising some records for patients.
LiteLLM was compromised in a fresh supply chain attack, and malicious packages were served to its users on both PyPI and Docker. The incident occurred on October 21 and involved v ...
Atlassian’s October 2026 security bulletin addresses 75 unique CVEs in third-party components used by its Data Center and Server products.