A github.dev flaw could let attackers steal GitHub OAuth tokens through a one-click attack, exposing private repositories and ...

Open source Git service Gogs is affected by a critical-severity zero-day vulnerability that exposes servers to remote code execution.

Google has released the June 2026 Android security patches to address 124 vulnerabilities, including one zero-day flaw exploited in targeted attacks. Local attackers can exploit the actively abused ...

They now identify vulnerabilities in production software at a speed, scale, and cost efficiency that no human team can match. Anthropic’s Claude Mythos and OpenAI’s GPT-5.5-Cyber are two prominent ...

Microsoft is facing an onslaught of criticism from the cybersecurity community after the company said it would seek criminal prosecution against a disgruntled security researcher who published several ...

The two vendors revealed details about the cyberattacks in separate disclosures Wednesday. Zero-day vulnerabilities in Cisco and SonicWall products have been exploited in new cyberattack campaigns, ...

Microsoft Exchange has now joined Windows 11 as Pwn2Own zero-day hackers continue to successfully attack the tech giant’s products.

As AI models continue to get more powerful, it’s not too surprising that some people are trying to use them for crime. The Google Threat Intelligence Group said on Monday that it has identified, for ...

Apple on Aug. 20 patched a zero-day flaw in its ImageIO framework — the latest in a series of zero-day vulnerabilities disclosed by the company this year. The vulnerability, tracked as CVE-2025-43300, ...

Oracle has confirmed that the threat actor group Cl0p is actively exploiting a zero-day vulnerability in the Oracle E-Business Suite product, versions 12.2.3-12.2.14. On October 4, 2025, Oracle ...

Hackers are now using AI agents to find software flaws 24/7, meaning the old ‘patch and pray’ strategy is dead. The new goal is to limit the damage once an intruder inevitably gets in. A zero-day is ...