Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any ...

A 16-year-old Linux kernel vulnerability, dubbed Januscape, allows attackers to escape a virtual machine and execute ...

A 16-year-old Linux KVM flaw (CVE-2026-53359) dubbed Januscape can allow attackers to escape virtual machines and execute ...

A critical vulnerability dubbed Januscape patched in the Linux kernel-based virtualization module poses arbitrary code execution risk to multi-tenant cloud environments and virtualized enterprise ...

A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and ...

Chinese hackers tracked as 'UAT-7810' are actively evolving their malware to expand their Operational Relay Box (ORB) network ...

Supply chain cyberattacks are bypassing internal defences by exploiting trusted third-party suppliers. From the XZ Utils backdoor to the Marks and Spencer MoveIt breach, recent incidents show how ...

The ransomware’s use of trusted administrative tools and recovery-disruption tactics shows why containment, not just endpoint ...

Unit 42 says attackers are posing as helpdesk staff and persuading employees to hand over remote control before dropping ...

IBM, Red Hat, and Deloitte announce Lightwell collaboration to help strengthen open source software supply chain trust ...

Chainguard today announced the expansion of Athena, the industry coalition for the orchestrated defense of open source software, adding new members, including Akamai, Black Duck, Cycode, JFrog, Morgan ...

In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are ...