A threat actor exploited WordPress flaws to breach dozens of organizations worldwide, including 18,000 records from a government agency.

A PAYLOAD ransomware incident weaponized Microsoft Active Directory Group Policy to disrupt a firms computers without encrypting files.

Ireland has fined Google €403 million after finding violations of multiple GDPR requirements while processing users’ location data.

Spain ordered internet providers to block Archive.today and six mirror domains under the country’s intellectual-property enforcement system.

WordPress has patched Click2Shell, that could allow an attacker to silently install a theme and execute PHP code on the targeted website.

Google's Gemini AI hacked three real companies during a cybersecurity test after gaining unintended internet access, ...

A malware campaign impersonates LastPass on GitHub to trick users into installing an information stealer called Rapuncel.

The hackers behind the recent Revolut data breach used infostealer-compromised Italian government email accounts for five ...

The Chinese FamousSparrow cyberespionage group has begun deploying a new modular backdoor named SparroWocky in attacks on ...

A breach affecting Brevo has pushed malicious JavaScript to more than 100,000 websites through Brevo-hosted widgets and ...

Google has fixed a high-severity Pixel modem vulnerability that may already have been exploited in limited, targeted attacks.

Helpfeel has disclosed a major data breach affecting its Gyazo image-sharing service, after an attacker exploited a vulnerability in an upload server to execute arbitrary commands and access backend ...