CVE-2026-61500 is a critical authentication bypass in Rejetto HTTP File Server, discovered by Anthropic Mythos AI and exploited within 24 hours of public disclosure by a China-linked actor targeting ...

A critical Next.js flaw could allow remote code execution via the Node.js ImageResponse implementation in next/og.

New cyberattack report from Microsoft Defender Experts Cybersecurity Incident Response explores actions organizations can ...

A Python-based malware builder can turn a single stealer into Windows programs for different operators. The tool packages a ...

Code generation LLM security is improved with CodeScan, detecting poisoned models with 97% accuracy and fewer false positives.

A new security vulnerability in Next.js could allow attackers to run code on a server via ImageResponse, the feature that generates Open Graph and other social preview images, Vercel said. The risk ...

Security researchers developed an attack that lets hackers with privileged access register a rogue external MFA provider that steals users' passwords during legitimate login attempts. The technique, ...

New security research has found that well over a thousand U.S. water and wastewater providers are exposed to hacks due to malware that’s capable of stealing their employees’ passwords and active ...

Beware: There's a new malware making the rounds and it's targeting your Android device. Cybersecurity researchers at Zimperium recently discovered a new strain of Android malware, called RatHat, and ...

The gopass password manager is an open-source command-line tool that encrypts secrets with GPG and syncs them via git. It's built for teams.