OpenCode has reported a security breach affecting 1.4% of its Console users, which it attributes to a “large-scale distillation attack.”

Federal investigators examining the ShinyHunters group have uncovered potential connections between the extortion group and executives at two ransomware negotiation firms, according to a KrebsOnSecurity investigation published on October 19.

A Chinese-speaking hacker used autonomous AI agents to compromise the websites of more than 100 companies, relying primarily on software for most of the intrusion work.

GhostAction has returned with an expanded credential-theft operation, injecting malicious GitHub Actions workflows into 790 repositories by October 9, 2026.

Fake Google Meet sites steal account credentials and 2FA codes, while an exposed install page leaks database configuration details.

We asked researchers which five RaaS groups businesses should be concerned about, along with some steps firms should take to mitigate the threat...

Midnight Mimosa, a widespread Android malware campaign, is turning inexpensive smartphones into advertising fraud engines.

In Meta commercial terms changes slated to kick in on October 30, the company will shift the liability for any mistakes made by its AI models to its enterprise

Hackers are exploiting a command injection vulnerability (CVE-2026-73570) in the Zimbra Collaboration Suite. This vulnerability allows attackers to compromise internet-facing email servers without any user interaction.

Hackers hijacked AOMEI Backupper updates for minutes at a time, delivering malware to unsuspecting users across multiple countries.

Fintech company Revolut is working to resolve a massive outage that disrupted most of its services worldwide earlier today.

A new joint architecture unifies multi-agent orchestration, model routing, and human review to help organizations push AI capabilities into production

The Russian group known as APT28 and Fancy Bear used a recently documented backdoor to dwell in the networks of two defense contractors and a law enforcement agency in two NATO allies, researchers said.

Compare five healthcare software development firms and learn how to build secure, compliant products under HIPAA, GDPR and FDA requirements.

Paradigm Healthcare Services detected an intrusion in October 2025, but it took nearly a year to start notifying affected individuals.

Ransomware operators are using generative AI to sharpen phishing campaigns, speed up reconnaissance, and identify sensitive corporate information to steal.