Discord has revealed that a recent security incident at one of its third-party support providers exposed personal details for a small group of users. The ...

Perplexity’s Comet browser can be turned into a silent data thief with a single click, researchers say. Security team LayerX today published a proof-of-concept they ...

A serious security flaw has been discovered in One Identity’s OneLogin platform. In earlier versions, 2025.3.0, the system accidentally exposed OIDC client secrets through its ...

The U.K. NCSC and Cisco warn that a state-linked campaign exploited recently disclosed Cisco firewall flaws in zero-day attacks to deploy two novel implants, RayInitiator ...

A new variant of the PlugX remote access trojan (RAT), also known as Korplug or SOGU, is being deployed in an ongoing cyber campaign against ...

Libraesva has rolled out an emergency security update for its Email Security Gateway (ESG) after confirming that a command injection vulnerability, tracked as CVE-2025-59689, was ...

Cybersecurity researchers at SentinelOne have come across a curious sample that may be the first malware to actually embed a Large Language Model (LLM). The ...

LastPass has warned of a widespread malware campaign in which attackers are abusing GitHub repositories to distribute Atomic Stealer (AMOS), an infostealer targeting Apple macOS ...