CVE-2026-20896 lets reachable Gitea Docker containers trust spoofed X-WEBAUTH-USER headers when reverse proxy auth is enabled ...

CertiK's H1 2026 Hack3d report finds $1.32B lost across 344 incidents — down 47% on paper, but roughly 28% higher than H1 ...

A new report reveals that AI agents can autonomously execute ransomware attacks, evidenced by the case of JADEPUFFER, which ...

Russian hackers have infiltrated the email accounts of UK government officials and overseas Foreign Office staff in a major national security breach.

In a year that will be best remembered for zero-day malware attacks, five members of the hacking—er, security ...

Anonymous-linked Canadian hacker jailed, researcher drops zero-days in open source projects, Venezuelans sentenced in the US over ATM jackpotting. SecurityWeek’s cybersecurity news weekly roundup ...

New research demonstrates how AI browsers can essentially be brainwashed into ignoring guardrails by creating a false reality around them.

Whether you're rocking the entry-level Bip 6 or a more feature-loaded option like the Balance 3, these Amazfit-specific hacks ...

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

A security researcher armed with Anthropic's Claude says he found a bug in the ticketing system that sells passes to some of ...

"Green" used to help Tesla uncover software flaws through its bug bounty program. Years later, the same hacker recovered the crash data the company swore didn't exist — while sitting at a Starbucks, ...

A Connecticut man faces up to 10 years in prison for allegedly selling Windows 2000 and Windows NT source code stolen from a ...