Technology from American companies is being used to power a revolution in the scam industry, playing a key role in the ...

Attackers have begun backdooring internet-exposed Ivanti Sentry appliances, the nonprofit security watchdog Shadowserver confirmed on June 11, 2026 — less than 48 hours after patches and a public ...

Microsoft released security fixes for more than 200 vulnerabilities on June 9, 2026 — the largest single Patch Tuesday in the program's history since its founding in 2003 — while a security researcher ...

A reverse shell makes the target machine initiate the connection back to the attacker, bypassing firewalls that only filter ...

ClickFix attacks are delivering BabaDeda, Lorem Ipsum, and Potemkin loaders to deploy stealers, RATs, and ransomware-linked ...

OpenAI rolled out a major tune-up for GPT-5.5 Instant, the default model behind ChatGPT. The refresh makes the bot far better ...

In May, Google's threat intelligence team found a zero-day exploit targeting a web administration tool. The exploit was a Python script that bypassed two-factor authentication after valid credentials ...

Ever since appearing on the cybersecurity scene, Nightmare-Eclipse (aka Chaotic-Eclipse) has probably been the largest thorn in the side of the Microsoft Security Response Center. The long-running ...

Microsoft has extended Windows Server 2022 hotpatching until October 2027, one year after the mainstream end date of October 2026. Microsoft has quietly extended its free Windows 10 Extended Security ...

The ShinyHunters extortion crew exploited an unpatched flaw in Oracle PeopleSoft to break into enterprise systems, steal data, and demand payment to keep it private. The campaign hit universities ...