Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
How continuous cluster monitoring and automatic Worker Node failover keep enterprise discovery scans running despite infrastructure disruptions
You might tell an AI chatbot secrets that you wouldn’t divulge to your closest friends. If you do, though, beware: They could end up as evidence in court.
Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution (RCE) on the open-source geospatial metadata catalog, which sits behind many government and agency geoportals. The project shipped fixes in versions 4.4.12 and 4.2.17 on July 8, 2026, and published the vulnerability details on August 31.
The U.S. Department of Justice charged a Russian national, extradited from Cyprus, with using roughly 255 fake accounts on a freelance platform to send malware-laced Excel attachments to about 80,000 users in 2016 and 2017. Searzhudin Tamirlanovich Aktulaev, 40, was arrested in Cyprus in May 2025 and made his initial appearance in federal court in San Francisco on August 31.
A California federal grand jury has indicted a Russian national for his role in a phishing campaign that infected thousands of freelancers with TVRAT and DarkVNC malware.
International law enforcement agencies and private partners have seized Sality malware infrastructure in a joint action aiming to disrupt and take down the peer-to-peer (P2P) botnet.