The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available.

The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild.

Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man, a widely used Chinese phishing market.

AI security startup Harmonic Security has raised $50 million in Series B funding to expand its engineering and go-to-market teams.

Investigators in the US arrested two individuals and seized 187 laptops in a crackdown on North Korean IT worker laptop farms.

Test conducted by Booz Allen demonstrate that frontier super intelligence navigated unfamiliar industrial systems, adapted when blocked, and moved physical equipment within minutes.

Ivanti has patched CVE-2026-104935, a Connect Secure (ICS) zero-day exploit that allows unauthenticated remote code execution ...

Hackers have stolen source code and employee information after breaching Meta GitHub repositories using stolen credentials.

Anthropic’s red team says AI worms built on small models may soon be able to spread across poorly secured IoT devices.

The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge.

Fresh Chrome and Firefox updates resolve 114 vulnerabilities as Mozilla introduces security-focused Firefox Enterprise.

Hackers targeted Danfoss refrigeration controllers, setting refrigerators and freezers in hundreds of European supermarkets ...