Microsoft patches CVE-2026-96940, which lets authenticated attackers read other users' Exchange mailboxes within the same ...

Apple plans tighter macOS Full Disk Access controls after AI agent use exposed risks to files, messages, mail, and browsing ...

GitGuardian found 28.65 million new hardcoded secrets in public GitHub commits in 2025, up 34% year over year.

Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle ...

Citrix patches CVE-2026-88779 after targeted zero-day attacks caused denial-of-service on SAML-enabled NetScaler deployments.

The Hacker News is the most trusted and popular cybersecurity publication for information security professionals seeking ...

Rejetto HFS CVE-2026-61500 faces exploitation attempts after a public PoC showed forged admin sessions can lead to remote code execution.

A penetration test found an AI-assisted financial app could restore applicant access from a GUID without independent proof of control.

Bitdefender GravityZone discovers 700+ AI tools, ranks risky usage, and lets teams allow, review, restrict, or block activity.

A suspected ShinyHunters member known as Rey was reportedly detained in Jordan and is said to be cooperating with the FBI.

TA419 targets U.S. AI policy experts with reply-triggered AitM phishing that captures Microsoft credentials and session ...

Warlock exploited SharePoint flaws in attacks on at least four organizations, including two critical infrastructure operators ...