The prospect of legal accountability is unclear. Lawsuits are a possibility, but some legal experts believe any criminal ...

Threat actors have been exploiting a high-severity vulnerability in Roundcube, the popular open source webmail client, the Canadian Centre for Cyber Security warns. Tracked as CVE-2026-48842 (CVSS ...

Rogue AI agents probed data providers for flaws during routine tasks, Transluce found, as Australia details an OpenAI agent ...

A threat actor is using three AI harnesses for vulnerability research, exploitation, and attack orchestration.

Kontext Security has launched publicly with $4 million in funding to provide visibility and control over AI agents’ actions.

SolarWinds has patched two bugs in Observability Self-Hosted that could lead to unauthenticated remote code execution.

NIST published a draft update to its OT security guide, while CISA and the FBI address the risks of working with third-party ...

Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.

Island raised $400 million in a Series F funding round led by Evolution Equity Partners, bringing the company’s valuation to $6.4 billion.

Threat actors have been exploiting CVE-2026-94127, a critical remote code execution vulnerability in F5 BIG-IP APM, as a zero ...

Check Point has patched CVE-2026-93616, a critical zero-day vulnerability in Management Server exploited in the wild.

Microsoft and its partners have disrupted EvilTokens, a phishing platform that uses AI throughout the attack chain.