Hackers exploited a critical zero-day vulnerability in a server running the KnowledgeDeliver learning management system (LMS) to deploy the Godzilla web shell.

Ghost CMS flaw CVE-2026-26980 enabled attacks on 700+ sites, injecting ClickFix malware through fake CAPTCHA pages.

The four C&C channels used by GlassWorm, the botnet targeting open source software developers, have been disrupted.

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious ...

A security flaw in “Claude in Chrome” enables any Chrome extension, including those without permissions, to execute ...

CVE-2026-5426, a hardcoded ASP.NET machineKey in KnowledgeDeliver, was exploited as a zero-day in ViewState deserialization ...

CVE-2026-5426 enabled KnowledgeDeliver LMS attacks before February 24, 2026, leading to Cobalt Strike infections.

Trump administration’s campaign of blowing up alleged drug-trafficking vessels has killed at least 194 in total ...

Command Alkon, the global leader in software and platform technology for the heavy building materials industry, announces the recent appointment of Davis ...

A variant of the PureLogs infostealer malware has been distributed through purchase-order-themed phishing emails that use a ...

Cohere, the trusted sovereign AI platform for governments and regulated industries worldwide, today announced the release of Command A+, a powerful open-source Mixture-of-Experts (MoE) model released ...

Minuki, the second in command of ISIS globally, has been killed in an operation conducted by U.S. and Nigerian forces in the ...