Ten years ago today, on June 17, 2016, an anonymous attacker exploited a smart contract vulnerability and siphoned 3,641,694 ETH out of The DAO. At the time, that represented roughly one-third of the ...

Bad actors are exploiting multiple security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. CVE-2026-39813 (CVSS score: 9.1) refers to a path traversal ...

GitHub has announced what it said are "breaking changes" coming to npm version 12, one of which turns off install scripts by default to combat software supply chain threats. The changes aim to combat ...

The zero-day "nightmare" apparently isn't over for Microsoft, as a disgruntled researcher who's been feuding with the company for the past three months has dropped yet another proof-of-concept (PoC) ...

Exploiting a race condition in Microsoft Defender, the exploit leads to local privilege escalation to SYSTEM. A security researcher has released another zero-day exploit targeting Microsoft’s Windows ...

Humanity Protocol’s H token plunged more than 80 percent after attackers stole private keys tied to the project and drained over $30 million from at least 17 wallets. The thief has been dumping stolen ...

Update: Added statement from Microsoft to the end of this article. A security researcher has released a new Microsoft Defender zero-day exploit named "RoguePlanet" just hours after Microsoft fixed two ...

Humanity Protocol’s H token collapsed by up to -90% intraday today after attackers drained more than $32M from project wallets, marking one of the sharpest single-session drops recorded by any named ...

Microsoft has cut off access to dozens of its open source projects hosted on GitHub as it investigates how hackers apparently breached the projects and injected password-stealing malware into the code ...

Bucks County District Attorney Joe Khan, saying parents are “outmatched” by social media companies in the fight for the online safety of their children, has filed a federal lawsuit against the makers ...

Meta has revealed that 20,225 Instagram users had their accounts hijacked in a recent incident where attackers used Meta's AI-powered support system to reset passwords. As BleepingComputer reported ...