Salesforce disabled Klue Battlecards integration after attackers used compromised OAuth tokens to access customer CRM data ...

Microsoft details AutoJack exploit chain targeting AutoGen Studio MCP WebSocket in pre-release builds, enabling ...

Apple fixed CVE-2025-20701 in Beats Studio Buds firmware 1B211, closing a Bluetooth pairing flaw that could allow nearby ...

FortiBleed attackers compromised 86,644 FortiGate devices using credential attacks, prompting CISA to urge password resets ...

Shadow AI has moved beyond data leakage as AI agents gain access to apps, APIs, credentials, and enterprise systems.

ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain ...

INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023 | Read more hacking news on The Hacker News ...

DragonForce-linked hackers used Backdoor.Turn to route C2 traffic through Microsoft Teams relay infrastructure during a U.S.

Microsoft reports a Windows clipper malware campaign using USB-delivered LNK files and Tor-based C2 since Feb 2026, stealing ...

F5 fixes CVE-2026-42530 and CVE-2026-42055 in NGINX Open Source, addressing HTTP/3 and HTTP/2 flaws that could allow remote ...

Integrity360 Europe found Reflectiz can support PCI DSS v4.0.1 requirements for payment-page script inventory, integrity, and ...

Check Point says a Rust-based crypto clipper is being promoted through fake reviews, GitHub, SourceForge, YouTube, and paid ...