The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud. Although the threat actor has targeted government ...

China-linked Jewelbug uses XG-Web for espionage and crypto fraud, stealing over 580,000 browser cookies and thousands of ...

WordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under ...

A malicious change was made to the legitimate QuickFox VPN installer, allowing it to secretly download a backdoor onto ...

China-linked Jewelbug used shared infrastructure to conduct government espionage and cryptocurrency fraud, logging more than ...

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create ...

Russian state hackers are using a maximum-severity vulnerability in Microsoft’s Outlook’s Exchange Server to backdoor unpatched machines and steal credentials and other confidential information from ...

Hackers tried to break into at least 30 municipal water systems in Minnesota on July 26-27, 2026. Since then, Michigan and ...

Cloudflare has introduced Kitesurf, a cloud-hosted browser designed for AI agents instead of people. The company says the ...

Owen Flowers and Thalha Jubair were convicted for their roles in the attack, which led to large costs for Transport for London.

Amber Salzman has seen a rare, inherited muscle disorder devastate her family. Now, with a fresh $90 million supply of cash, ...