Duolingo co-founder Severin Hacker steps down as CTO to focus on hands-on technical work while remaining on the board.

Hackers hide Agent Tesla malware in Unicode emojis inside fake bank emails, tricking finance teams into opening malicious ...

The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process. A critical-severity type ...

Three suspected Russian cyber-espionage clusters are abusing legitimate authentication features to compromise personal ...

Three suspected Russian cyber espionage clusters abuse legitimate authentication flows to compromise personal accounts across ...

Isolated-vm's ExternalCopy type confusion lets sandboxed code corrupt host memory and potentially reach host RCE; fixes are ...

A Huntress researcher was contacted by an X account with the handle "@HartmansDoeke," who claimed to be the vice president ...

The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud. Although the threat actor has targeted government ...

An AI trained to find unpatched vulnerabilities and build working exploit chains is now a commercial product. OpenAI's ...

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create ...

Laundry Bear exploits security flaw in unpatched Zimbra servers, stealing 90 days of emails and authentication data without victims clicking a link.

Amazon links multiple software supply chain attacks to one North Korean hacking group Generative AI enables convincing malware hidden inside trusted software packages at scale Attackers manipulated ...