WordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under ...

JavaScript Explicit Resource Management lands in Safari Technology Preview 250, completing cross-browser support across V8, ...

keyv npm supply chain attack on August 4, 2026 let the Shai-Hulud worm compromise 400-plus packages and more than two billion ...

IP and DNS leaks in WebKit are affecting proxy browsers and iCloud Private Replay, according to Mysk. WebKit is an open-source web browser engine. It reads code like HTML, CSS, and JavaScript, and ...

It can be daunting to determine who’s responsible for showing ads on the websites we visit, or who’s harvesting data from the ...

Laundry Bear exploits security flaw in unpatched Zimbra servers, stealing 90 days of emails and authentication data without ...

Uninterrupted browsing used to be a lot simpler: Disable all third-party cookies, blacklist known tracking domains, and get an ad blocker. But now, online platforms can pick up on things like your ...

Reports from Cisco Talos and CrowdStrike provide real-world insights into how AI is evolving attackers’ tradecraft and ...

OpenAI's two cyber defense models are now available to eligible customers on Amazon Bedrock, AWS announced on August 11, 2026, one day after OpenAI expanded its Daybreak initiative with new access ...

A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub ...

OpenAI is splitting its cybersecurity program into two access tiers and releasing a new purpose-trained model alongside them, the company announced on. Daybreak Blue opens frontier general-purpose ...

The sign-in prompt in Office 365 or Microsoft 365 desktop apps may say device TPM problem, Trusted Platform Module ...