The popular product lifecycle management platform is under active exploitation for an RCE vulnerability that could put ...

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

Attackers drained about $830,000 in USDC from Hinkal on July 3, nearly matching the privacy protocol’s total value locked across five blockchains. Blockchain se ...

A researcher found that using Anthropic’s Claude Opus 4.7, he could break into the website of Front Gate—used by every ...

Researchers at XM Cyber have discovered a method to attack a Mac without requiring a kernel exploit or bypassing macOS’s ...

Hackers infiltrated Polymarket’s website via a compromised third-party vendor, the company said, swiping millions in crypto ...

The second quarter of 2026 saw 83 cybersecurity incidents that cost the industry $755 million, with bridge exploits emerging ...

A Pakistan-linked cyber espionage group is exploiting the ongoing 2026 NEET-UG paper leak controversy to target Indian users with malware disguised as legal documents related to the examination ...

Tech pro ThioJoe explains how attackers exploit invisible text inside Windows environments to secretly carry out malicious ...

Crypto hacks and exploits totaled about $75.9 million across 40 major incidents in June, down 7.1% from $81.7 million in May, according to blockchain security ...

Taiko’s bridge was exploited for up to $1.7 million after attackers forged cross-chain message proofs and drained its ERC20 ...

Last Tuesday, Microsoft patched a vulnerability it rated as max critical in its M365 Copilot AI platform. On Monday, the researchers who discovered the vulnerability and reported it to Microsoft ...