The City of Columbus, Ohio, informed the Maine Attorney General’s Office that approximately 55% of its residents were affected by the breach

Cybercriminals are exploiting DocuSign APIs to send fake invoices, bypassing security filters and mimicking well-known brands

A US district court sentenced a Nigerian man for an elaborate ‘man-in-the-middle’ phishing campaign, which resulted in $12m in losses from real-estate transactions

The flaw, an exploitable stack buffer underflow in SQLite, was found by Google’s Big Sleep team using a large language model (LLM)

US government agencies said the video, widely shared on social media, is part of Russia’s broader strategy of undermining the integrity of the Presidential Election

Cyble Research investigates critical ICS vulnerabilities identified by CISA, emphasizing urgent patching for affected products.

The bug affected accounts with 52-character user names, and had several pre-conditions that needed to be met in order to be exploited.

As businesses worry over deepfake scams and other AI attacks, organizations are adding guidance for cybersecurity teams on how to detect, and respond to, next-generation threats. That includes Exabeam, which was recently targeted by a deepfaked job candidate.

CISA and the FBI released a Product Security Bad Practices Report asserting C, C++, and other languages cause potential security breaches.

The Pakistan-based advanced persistent threat actor has been carrying on a cyber-espionage campaign targeting organizations on the subcontinent for more than a decade, and is now using a new and improved "ElizaRAT" malware.

The Iran-linked group Emennet Pasargad aims to undermine public confidence in Israel and Western nations by using hack-and-leak campaigns and disrupting government services, including elections.

In a scenario reminiscent of a modern-day Italian Job, hackers have allegedly breached Italy’s national security, exposing confidential data of some of the country’s most prominent political …

A new Which? report outlines serious privacy concerns with smart device products including air fryers

Medical institutions are among the top targets for threat actors, here five major threats facing the healthcare sector and what organizations can do to stay secure

Google clarified it was the first undiscovered memory safety bug to be flagged by an AI agent, touting this as a significant step in using AI for vulnerability research

A hacker claimed to have stolen 400,000 rows of user data from Schneider Electric and took to social media to taunt the French multinational

Attackers are exploiting the "Envelopes: create API" of the enormously popular document-signing service to flood corporate inboxes with convincing phishing emails aimed at defrauding organizations. It's an unusual attack vector with a high success rate.