Microsoft patches 1,259 flaws, including an actively exploited Outlook vulnerability that could expose NTLMv2 hashes through crafted files.

Microsoft demonstrates how editing as few as six AI model neurons can plant backdoors that trigger command execution by agents.

Hackers are exploiting a critical Xen Orchestra authentication bypass that can grant admin access and lead to XCP-ng node ...

Blind Eagle targets Latin American organizations with judicial phishing lures and HTML smuggling to deliver an AsyncRAT-based ...

Railway says stolen AI API keys caused $740,000 in unauthorized charges after attackers decrypted secrets in up to 100,000 workspaces.

Binance warns that an iOS sandbox escape could expose crypto wallet keys to malicious apps, with no confirmed fix in Apple's ...

Fireworks AI says attackers accessed customer billing data, secrets, datasets, and incomplete model weights in a broader ...

Attackers chained two now-patched AhsayCBS flaws to deploy web shells, XMRig miners, and a Python backdoor tied to its host.

CISA adds exploited Cisco BroadWorks and Openwave flaws to its KEV catalog, requiring federal agencies to patch by November 24, 2026.

An iOS sandbox escape published on GitHub lets an app read other apps' files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and login credentials at risk of exposure to ...

Check Point links three espionage clusters to the Sparrow malware ecosystem, targeting telecom, government, and other sectors ...

Explore the latest news, real-world incidents, expert analysis, and trends in game+launcher+hack — only on The Hacker News, ...