DOJ charged 17 alleged Mabna Institute members in a cyber espionage campaign that stole at least 31.5TB of research data and ...

OpenAI offers Zero Data Retention for frontier-model API customers, with Private Safety Processing protecting prompts and ...

Sakura Internet disclosed a potential breach of its sales system that may expose personal data from up to 1.36 million ...

A security researcher has successfully reverse-engineered Apple's private Find My People protocol, demonstrating that a Linux ...

Kaspersky researchers found Russian organizations targeted with TrueConf installers bundled with PhantomCore malware linked ...

Spring Security’s critical UnboundID LDAP flaw could let remote attackers gain admin access to exposed in-memory LDAP directories.

SilkParasite targets Central Asian governments with spear-phishing emails, malware, and seven remote-access tools for ...

Chrome 151 fixes seven flaws, including a critical Chromoting use-after-free vulnerability that could enable remote code execution.

Threat actors are actively exploiting a critical, unauthenticated server-side request forgery (SSRF) vulnerability in MLflow, the popular open-source platform widely used by data engineering and ...

A sprawling Azure data exfiltration campaign is unfolding across the dark web, with a threat actor systematically selling off internal employee directories stolen from some of the world’s largest ...

Dysphoria has turned a large number of everyday internet-connected devices into a potential attack network. The botnet is linked to roughly 296,000 compromised devices, placing routers, cameras, ...