Mudhra plans to exit global SSL/TLS certificates after eight weak CA keys were recovered, as Chrome and Firefox withdraw ...

Critical RCE flaws, stolen credentials, data breaches, phishing scams, AI security risks, and cyber threats you may have ...

Two CVSS 9.0 flaws in Linux KSMBD could enable remote code execution; one needs no authentication, and neither has a mainline ...

A New Mexico court ordered Meta to pay $25 billion over 43 million privacy-related violations linked to the Cambridge ...

Amazon detected a PHP2Shell exploit attempt on October 17, before disclosure, followed by further attempts after patches were ...

INTERPOL's Operation Serengeti III disrupted 10,909 malicious networks, arrested 1,462 suspects, and recovered over $105 ...

Explore the latest news, real-world incidents, expert analysis, and trends in DarkHotel+APT — only on The Hacker News, the ...

Railway says an intruder may have accessed decrypted environment variables for some users, as a researcher reports related ...

Node.js fixes 10 flaws, including a Brotli decoder bug that may allow code execution when apps decompress attacker-controlled ...

Attackers compromised LiteLLM's release pipeline to ship a credential stealer and backdoor, then tested stolen AWS ...

A patched OpenCode flaw could let malicious MCP servers execute code on Windows and WSL when developers initiated OAuth ...

FoxIO disclosed QPACK flaws in seven HTTP/3 stacks that can cause denial of service through header expansion, with three ...