An "agentic threat actor" successfully exploited a Langflow flaw to steal data from a production database server and encrypt ...

Nothing broke, so I never looked.

Researchers at Sysdig say they have observed, for the first time, a ransomware attack carried out almost entirely by an AI agent. According to the ...

Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...

Citrix NetScaler received patches for another memory leak vulnerability similar to CitrixBleed, as well as memory overflow, file read and denial-of-service issues ...

Secure software supply chain solution provider Chainguard Inc. today expanded its Chainguard Repository product with malware ...

On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that ...

JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.

Google has announced that certain Workspace subscribers can now send end-to-end encrypted emails to anyone, regardless of the provider. If you're a Gmail client-side encryption (CSE) user on a Google ...

With today's release of iOS 26.5, Apple has begun rolling out beta support for end-to-end encrypted RCS messaging. As with all things RCS, there are some basic requirements both you and the recipient ...

Instagram will remove end-to-end encryption for direct messages between users from May 8, 2026. When the date comes around, Meta will potentially be able to see the contents of all messages between ...