Toyota Motor Corporation has confirmed that a cyber attack on its supplier management system disrupted production at 12 manufacturing plants across Japan, North America, and Europe for approximately 48 hours.
Signal has announced a major update to its encryption protocol, integrating NIST-approved post-quantum algorithms to protect messages against future quantum computing threats while maintaining forward secrecy.
A coordinated credential stuffing campaign has compromised over 2 million accounts across major streaming platforms including Netflix, Disney+, and Spotify using credentials from a recently leaked database.
A new ransomware campaign is mass-exploiting a known vulnerability in VMware ESXi hypervisors to encrypt virtual machines, with over 3,500 servers compromised worldwide in the past two weeks.
Microsoft has launched an AI-powered autonomous threat hunting capability in Defender for Endpoint that continuously analyzes telemetry data to proactively identify and respond to sophisticated attacks without human intervention.
Researchers have demonstrated that generative AI can be used to create polymorphic malware that automatically rewrites its own code to evade detection by all major antivirus and EDR products tested.
Genesis Market, the notorious dark web marketplace for stolen credentials and browser fingerprints that was taken down by the FBI in 2023, has resurfaced as "Genesis 2.0" with enhanced security and cryptocurrency anonymity features.
A public exploit has been released for a critical unauthenticated RCE vulnerability in Fortinet FortiGate firewalls before the vendor has issued a patch, putting an estimated 490,000 devices at immediate risk.
A critical vulnerability in PostgreSQL versions 14 through 17 allows unauthenticated attackers to execute arbitrary code by exploiting a buffer overflow in the database server's authentication handling.
Cloudflare has disclosed that it successfully mitigated a record-breaking distributed denial-of-service attack peaking at 5.8 terabits per second, nearly doubling the previous record set in late 2025.
US telecommunications giant VeriConnect has disclosed that a sophisticated insider-assisted SIM-swap operation compromised approximately 500,000 subscriber accounts over a six-month period.
The FBI has issued an urgent advisory warning businesses about a dramatic increase in BEC attacks that leverage real-time deepfake audio and video to impersonate executives during video calls and authorize fraudulent wire transfers.
A sophisticated attack on global DNS infrastructure redirected traffic intended for major banking websites through attacker-controlled servers for approximately six hours, potentially exposing millions of banking sessions.
Researchers have demonstrated that GitHub Copilot can be manipulated to leak fragments of private repository code through carefully crafted prompt injection techniques embedded in public repositories.
A new malware campaign called "UpdateAgent 3.0" is targeting macOS users through convincing fake software update notifications that deliver a sophisticated info-stealer capable of extracting passwords, crypto wallets, and session tokens.