CVE-2025-66516 is a critical Apache Tika vulnerability can be exploited on all platforms in XXE injection attacks via crafted ...

SecurtyWeek interview with Keith McCammon, CSO and Co-founder at Red Canary for the CISO Conversations series.

Google is introducing new security protections for prompt injection to keep users safe when using Chrome agentic capabilities ...

Exploitation of React2Shell started almost immediately after disclosure. AWS reported that at least two known China-linked ...

Ransomware payments surpassed $4.5 billion between 2013 and 2024, a new report from the US Treasury’s FinCEN shows.

A recently disclosed Tri-Century Eye Care data breach stemming from a ransomware attack affects roughly 200,000 individuals.

Resemble AI has raised $13 million in strategic investment that will help it accelerate product development and global expansion efforts.

The University of Pennsylvania and the University of Phoenix confirmed as victims of the Oracle’s E-Business Suite (EBS) hack ...

The China-linked Warp Panda APT has deployed the BrickStorm malware on VMware servers at US legal, manufacturing, and ...

Cloudflare has blamed a Friday outage on mitigations for the critical React vulnerability dubbed React2Shell. React2Shell, ...

The Aisuru botnet continues to be responsible for record-breaking distributed denial-of-service (DDoS) attacks.

The personal and financial information of over 780,000 bank and credit union customers was stolen in the Marquis data breach.