A threat actor exploited WordPress flaws to breach dozens of organizations worldwide, including 18,000 records from a government agency.

A PAYLOAD ransomware incident weaponized Microsoft Active Directory Group Policy to disrupt a firms computers without encrypting files.

Ireland has fined Google €403 million after finding violations of multiple GDPR requirements while processing users’ location data.

Spain ordered internet providers to block Archive.today and six mirror domains under the country’s intellectual-property enforcement system.

WordPress has patched Click2Shell, that could allow an attacker to silently install a theme and execute PHP code on the targeted website.

CenterPoint Energy confirmed that hackers obtained personal information belonging to some of its customers through an ...

Google's Gemini AI hacked three real companies during a cybersecurity test after gaining unintended internet access, ...

A malware campaign impersonates LastPass on GitHub to trick users into installing an information stealer called Rapuncel.

The Chinese FamousSparrow cyberespionage group has begun deploying a new modular backdoor named SparroWocky in attacks on ...

The hackers behind the recent Revolut data breach used infostealer-compromised Italian government email accounts for five ...

A breach affecting Brevo has pushed malicious JavaScript to more than 100,000 websites through Brevo-hosted widgets and ...

A browser extension installed by 30,000 Twitch users was found forwarding live OAuth session tokens to a Russian service's ...