OpenAI fired three safety researchers for a “breach of trust,” after the trio accused the company of putting its corporate ...

Anthropic’s OSS Scanner sends unreviewed AI bug reports to opt-in open source projects, while a new program brings Claude to ...

The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.

Google says threat actors hijacked the .gh, .sl, and .as ccTLDs and obtained HTTPS certificates for several of its domains.

Bitdefender uncovered Midnight Mimosa, a firmware-level Android malware campaign shipping preinstalled on budget smartphones ...

The US has seized MicroScan and FishHub, tools used by Flax Typhoon and other Chinese APTs in critical infrastructure ...

Tensorlake npm SDK compromised, Empire Market co-founder gets 40 years, exposed NVIDIA GPU monitors leak telemetry.

Citrix urges customers to immediately patch CVE-2026-107406, a critical NetScaler vulnerability leading to remote code ...

GWU researchers developed a mathematical model to predict when local AI transformer models tip into rogue behavior during ...

Experts are split on whether security awareness training works and a cognitive psychologist explains how it could be improved ...

Cisco has patched over a dozen critical vulnerabilities that could lead to RCE, DoS, privilege escalation, and other types of ...

Participants earned over $1.2 million at Pwn2Own Ireland 2026 for exploits targeting Google Pixel 10 phones, AI infrastructure, and smart home tools.