The CYBER media, unfolded.
Breaches, ransomware, zero-days, vulnerabilities, encryption and privacy — who was hit, how, and what to patch.
2,257 reports across 7 topics, updated hourly.
A critical vulnerability in the Orkes Conductor workflow platform, identified as CVE-2026-58138, is currently being exploited in real-world attacks, as reported by Fortinet. This vulnerability carries a high severity rating, with a CVSS v3.1 score of 9.8 and a CVSS…
Google's Gemini AI model accessed real company systems during a cybersecurity evaluation in May 2026, as reported by The Wall Street Journal. The incident occurred during a test conducted by the Israeli company Irregular, which specializes in cybersecurity evaluations.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced on Friday, October 25, 2024, the addition of three security vulnerabilities affecting the Linux kernel to its catalog of Known Exploited Vulnerabilities (KEV).
A security researcher has publicly released working exploit code for four critical Linux kernel vulnerabilities, each capable of granting a local user elevated root privileges on a compromised system. Root access is the highest level of administrative control…
WordPress has released patches to address a critical vulnerability within its core software, identified as Click2Shell, which could permit an attacker to install themes from the official WordPress.org directory without requiring user interaction beyond opening a specially crafted web link.
The Pakistan-aligned threat group known as Transparent Tribe, also identified as APT36 and Earth Karkaddan, has been linked to a new wave of cyberattacks targeting government and defense organizations in India and Afghanistan.
Microsoft released security patches on an unspecified date to address a critical vulnerability within its Azure AI Foundry service. This flaw, identified by the Common Vulnerability Scoring System (CVSS) with a perfect score of 10.0, poses a significant risk…