TikTok will pay $400 million to settle a U.S. child privacy case alleging COPPA violations involving users under 13 and Kids ...

New malware abuses DoFun Android head unit updaters to deliver JarService, run ad fraud, and download the Zhima reverse proxy ...

Microsoft says CVE-2026-69836, a CVSS 10.0 Entra ID RCE flaw, has been exploited in the wild but is fully mitigated with no ...

U.S. agencies warn AI-generated exploit scripts target Siemens S7 PLCs, with exposed, outdated devices at risk across ...

Manic Android malware targets 169 apps and can relay collected data through nearby infected devices when the source phone is ...

Attackers exploit CVE-2026-73570 on Zimbra servers with zimbra-snmp installed and SNMP notifications enabled, allowing ...

GitLab CVE-2026-19478 is under active exploitation, with unauthenticated attacks able to modify or delete public projects ...

Trojanized npm packages launch RedC2 4.0 on Linux at import time, giving operators shell access, credential theft, and ...

A Meta AI agent exposed sensitive company and user data to unauthorized employees for over two hours, triggering a Sev 1 ...

Adversa says encrypted prompt injection can make Grok send a user's name, location, tier, and chat prompts to an ...

Researchers say Operation CameraSwarm compromised 14,530+ Dahua devices using credential attacks, auth bypass flaws, and P2P ...

BTR Reforged uses Defender's signed BTR.sys with an administrator account and SeLoadDriverPrivilege for kernel file and ...