Stay updated with the latest cybersecurity news, threat intelligence, and industry updates from secure.com.
Attackers are already probing the SonicWall SMA1000 SSRF flaw days after the fix, with more than 400 gateways still exposed.
A new NetScaler vulnerability scored 9.5 puts SAML-configured appliances one request away from takeover.
A single exposed key turns onion service key theft into a full identity takeover of a .onion address.
In the first adversarial poetry attack caught in the wild, malware reads its control server out of a poem on GitHub and has hijacked 3,000+ AI...
The Tensorlake npm attack steals a developer's secrets the second it installs, then wipes the drive if you revoke the token it stole.
The FortiBleed attack is back, and this time the FBI says intruders are locking companies out of their own Fortinet firewalls before ransomware lands.
TL;DR: On Wednesday, the company that sells email security to much of the Fortune 500 told its customers to go switch a feature off. By the...
Attackers exploited Zimbra CVE-2026-73570 to drop web shells, steal signing keys and read mail on hundreds of servers.
One developer's story shows how an AI coding agent can erase a production database in minutes.
The BragJack attack turned trusted browser AI agents into data thieves using a single extension and zero user clicks.
Federal cybersecurity officials have issued an urgent mandate for agencies to secure systems against newly exploited flaws in popular enterprise software.
A new N-able N-central patch bypass let attackers seize RMM servers and jump straight to customer endpoints.
A Magento zero-day, CVE-2026-75650, is being used to backdoor live online stores. Patch now.