According to Microsoft's release notes, the update fixes 25 elevation of privilege flaws, 12 remote code execution ...

China-linked Amaranth-Dragon and Mustang Panda target Southeast Asian governments using WinRAR exploit and PlugX phishing ...

Leaked non-human identities like API keys and tokens are becoming a major breach driver in cloud environments. Flare shows ...

A high-severity OpenClaw flaw allows one-click remote code execution via token theft and WebSocket hijacking; patched in ...

A hacking campaign took just days to exploit a newly disclosed security vulnerability in Microsoft Windows version of WinRAR, ...

Smug faces across all those who opposed the WordPad-ification of Microsoft's humble text editor Just months after Microsoft added Markdown support to Notepad, researchers have found the feature can be ...

When Microsoft patched a vulnerability last summer that allowed threat actors to use Windows’ shortcut (.lnk) files in ...

FIRST forecasts a record surge in disclosed vulnerabilities in 2026, but security researchers say most will not translate ...

Attackers exploited Hugging Face’s trusted infrastructure to spread an Android RAT, using fake security apps and thousands of ...

The advantage in 2026 won't come from processing more alerts or writing faster signatures, it will come from recognizing ...

Adversaries weaponized recruitment fraud to steal cloud credentials, pivot through IAM misconfigurations, and reach AI ...

As AI shifts from helpful copilot to independent operator, enterprises are discovering that identity—not networks or ...