A public PoC exposes a Telegram Desktop flaw that enables local file theft and account takeover via crafted links.

VirusTotal added daily public IPv4 scanning to help security teams detect C2 servers and track malware infrastructure.

Anthropic has introduced OSS Scanner, a free service that checks critical open-source repositories for security vulnerabilities and sends findings directly to project maintainers.

Microsoft urges organizations to test PKI, HSMs and security appliances for post-quantum authentication before deploying new cryptography.

A fake Android PDF reader on Google Play gained 10,000+ installs while delivering Anatsa banking malware to steal financial ...

CVE counts are despair metrics. We ranked 2026’s 10 best container image scanners — Trivy leads free, Sysdig and Wiz add ...

GreyNoise has identified a rise in scanning and remote code execution attempts targeting video surveillance devices in Ukraine between September 21 and October 1, 2026.

DarkSword operators use Coruna malware to steal iPhone crypto wallet recovery phrases, with exposed servers revealing theft ...

Let’s Encrypt will cut its default TLS certificate lifetime from 90 days to 64 days on February 10, 2027, giving website ...

Public PoC released for CVE-2026-102489, a critical Zammad flaw enabling unauthenticated session cookie theft and potential code execution.

A malicious Tensorlake npm release carries a Shai-Hulud worm variant that steals developer secrets and spreads through ...

Microsoft Teams is preparing to support synthetic audio and video detection to help organizations spot deepfake attacks. The ...