SAP released 15 new security notes on its March 2026 Security Patch Day, including two that resolve critical vulnerabilities ...

KeePassXC 2.7.12 protects Windows users from DLL injection via OpenSSL, changes passkey flags, and supports TOTP placeholders in Auto-Type.

Researchers link Silver Dragon APT to APT41 after attacks on government entities using Cobalt Strike, DNS tunneling, and Google Drive-based C2.

This week, Cisco patches and hacks. Trojanized app targeted Israelis. Bye-bye, Tycoon 2FA. Also bye-bye LeakBase. A ...

CNCERT warns OpenClaw AI agent has weak defaults enabling prompt injection and data leaks, prompting China to restrict use on government systems.

In the automation tool n8n, eleven security vulnerabilities have been discovered. Three of these are considered critical risks. Admins should update quickly. IT researchers have discovered eleven ...

Hackers are impersonating IT staff in Microsoft Teams to trick employees into installing malware, giving attackers stealthy access to corporate networks.

A tampered copy of FileZilla quietly contacts attacker-controlled servers using encrypted DNS traffic that can slip past traditional monitoring.

Professional thieves are using CAN bus injection to bypass $1,600 Toyota Tundra security options in under 10 minutes. This investigation into Jonathan Sewell’s stolen 2024 Tundra reveals why factory ...

In addition to rolling out patches to address two zero-days affecting SQL Server and .NET, Microsoft introduced Common Log ...

Developer-first security tool blocks AI manipulation attacks in under 100 milliseconds with a single API call Our goal was to make prompt security as simple as Stripe made payments: one API call, ...