Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

Security researchers at Cybernews discovered on June 12 what they describe as one of the largest credential databases ever left exposed online — a publicly accessible Elasticsearch cluster holding 24 ...

A coordinated campaign against government and financial targets across Latin America has been laid bare by the attackers' own mistake, after they left a staging server exposed online. New analysis ...

India's red-hot initial public offering market may look irresistible as foreign firms line up for listings, but the rush is not about raising funds to expand in a fast-growing market; it's about ...

An unknown threat actor has leveraged a large language model agent to conduct a swift, automated cyberattack, Sysdig reported after observing the incident on May 10, 2026. The attack began with the ...

Having a whole bunch of smart objects like lights, appliances, and thermometers can make life a little more convenient for businesses, but buying into the internet of things can also make those same ...

AI tools are revolutionizing cyberattacks, lowering barriers for attackers and enabling sophisticated exploits, while cybersecurity leaders stress the need for enhanced defenses and collaboration to ...

Russian forces used a declared three-day ceasefire to redeploy units and expand drone activity, according to the Institute for the Study of War, underscoring continued hostilities despite political ...

All Linux kernels released after 2017 are vulnerable to critical privilege escalation bugs. A tiny 732-byte exploit grants root privileges across all major Linux distributions, with containerized ...

Hackers abuse Obsidian Plugins to deploy stealth malware on devices Fake VC scams on LinkedIn push victims to malicious Obsidian Plugins PHANTOMPULSE malware spreads via Obsidian Plugins and cloud ...

Forbes contributors publish independent expert analyses and insights. Davey Winder is a veteran cybersecurity writer, hacker and analyst. This voice experience is generated by AI. Learn more. This ...

A researcher released a working ‘BlueHammer’ Windows zero-day exploit that could impact over 1 billion devices, granting SYSTEM-level access and leaving no patch yet. A disgruntled security researcher ...