The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud. Although the threat actor has targeted government ...

China-linked Jewelbug uses XG-Web for espionage and crypto fraud, stealing over 580,000 browser cookies and thousands of ...

A malicious change was made to the legitimate QuickFox VPN installer, allowing it to secretly download a backdoor onto ...

WordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under ...

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create ...

Russian state hackers are using a maximum-severity vulnerability in Microsoft’s Outlook’s Exchange Server to backdoor unpatched machines and steal credentials and other confidential information from ...

Hackers tried to break into at least 30 municipal water systems in Minnesota on July 26-27, 2026. Since then, Michigan and ...

Owen Flowers and Thalha Jubair were convicted for their roles in the attack, which led to large costs for Transport for London.

Cloudflare has introduced Kitesurf, a cloud-hosted browser designed for AI agents instead of people. The company says the ...

China-linked Jewelbug used shared infrastructure to conduct government espionage and cryptocurrency fraud, logging more than ...

By Raphael Satter, AJ Vicens and Anirban Sen WASHINGTON, Aug 6 (Reuters) - Ransom-seeking hackers who use phone calls to compromise their victims targeted dozens of prominent U.S. financial ...

Laundry Bear exploits security flaw in unpatched Zimbra servers, stealing 90 days of emails and authentication data without victims clicking a link.