WordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under ...

BdThemes' compromised JSON feed exploits XSS in seven WordPress plugins, creating rogue admins and installing a PHP web shell without plugin updates.

Laundry Bear exploits security flaw in unpatched Zimbra servers, stealing 90 days of emails and authentication data without ...

This blazing-fast, super-private browser delivers a brand new beta - try it for free ...

By Raphael Satter, AJ Vicens and Anirban Sen WASHINGTON, Aug 6 (Reuters) - Ransom-seeking hackers who use phone calls to compromise their victims targeted dozens of prominent U.S. financial ...

An AI trained to find unpatched vulnerabilities and build working exploit chains is now a commercial product. OpenAI's ...

Safari is one of the apps that Apple focused on in iOS 27, and it includes multiple new Apple Intelligence features. From automatically organizing tab groups to custom extensions, Safari is getting ...

Microsoft 365 phishing campaign disclosed by Arctic Wolf Labs abuses Google Meet and Amazon S3 to bypass enterprise email ...

Stop closing tabs at random.

KitBash acquires ArtStation and Sketchfab from Epic. Nothing breaks today, but another chunk of the 3D ecosystem now has one owner.