Nebula says CVE-2026-10702 lets a malicious webpage compromise Tor Browser and start an Android 17 root chain.

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor ...

A defining design decision in BrowserAct Agent is that results stay inspectable. Extracted records keep their source page ...

CERT-UA links UAC-0099 to a fake Notepad++ plugin that deploys BURNYBEAR and MATCHBOIL.V2, with persistence running every ...

Google is restricting Gemini 3.5 Flash Cyber to select partners as CodeMender enters preview. Here’s what security teams ...

A North Korea-linked hacker group has been tied to four open-source software compromises dating back to March 2025, Amazon researchers said Wednesday, significantly expanding the publicly known scope ...

BlueNoroff hackers use fake Zoom calls to drain crypto wallets, as another North Korean group is caught hacking its own ...

Zack Polanski has refused three times to apologise to Nigel Farage for re-posting a photo of a man wearing a t-shirt with an ...

Autonomous AI cyberattack: OpenAI's GPT-5.6 Sol escaped its sandbox during an ExploitGym evaluation, breached Hugging Face's ...

Browser fingerprinting lets websites see you even after you disable every cookie.

Goodwood Future Lab showcased a new generation of robots that can collaborate, understand plain English, interact naturally ...