China-nexus UAT-11587 targets Asian government and policy groups with Antino, a Rust backdoor that uses Microsoft 365 for C2.

Dell fixes six CSM flaws enabling authentication bypass, storage credential access, and cluster-wide privilege escalation.

OpenAI parted ways with three safety researchers after finding they mishandled sensitive information, reportedly tied to infrastructure architecture.

European police arrested three KillSec suspects, seized its leak site and servers, and secured at least 110 TB of data.

Fortinet says attackers are exploiting a FortiMail flaw that lets unauthenticated users write arbitrary files via crafted HTTP requests.

Android 17 limits accessibility service access under Advanced Protection to verified Accessibility Tools, blocking a major malware abuse path.

Public PoC for CVE-2026-86950 triggers a controlled out-of-bounds write in CoreGraphics; code execution is not demonstrated.

OpenAI disrupted a coordinated campaign attributed to Moonshot AI associates that sought to extract protected reasoning at ...

Unknown attackers exploit a patched Citrix NetScaler flaw to gain root access and deploy web shells and a tunneler.

Bitget says attackers exploited a third-party zero-day to steal $387.5 million and move laterally into its wallet environment ...

Attackers are exploiting CVE-2026-76504 to access Cisco SD-WAN Manager APIs as admin without credentials; fixed releases are ...

Cisco confirms active exploitation of a Catalyst SD-WAN Manager authentication bypass that can grant unauthenticated attackers admin API access.