Ghost CMS flaw CVE-2026-26980 enabled attacks on 700+ sites, injecting ClickFix malware through fake CAPTCHA pages.

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious ...

Eight students alleged to have been involved in a suspected arson attack at a Kenyan girls' school that killed 16 pupils have ...

A hypersonic missile, which reportedly travels over 10 times the speed of sound, was used, Russia has confirmed.

GlassWorm poisoned 300 GitHub repositories since 2025, enabling supply chain attacks against developers and organizations.

An Austrian court has convicted a man of planning to attack a Taylor Swift concert in Vienna nearly two years ago. He was sentenced to 15 years in prison The ...

The U.S. military has accused Iran of violating a fragile ceasefire after Kuwait reported coming under attack following an American strike against the Islamic Republic. It's the latest flare-up of ...

Attackers are increasingly abusing Microsoft’s legacy MSHTA utility to silently deliver malware, stealers, and persistent ...

By discreetly measuring EM leaks and SSD operations, attackers leveraging the FROST attack can effectively spy on browser activity from a single open tab.

TanStack has released a detailed postmortem describing a sophisticated supply-chain attack that compromised 42 npm packages ...