WordPress fixes CVE-2026-64638, a pre-auth login XSS affecting every version, with a demonstrated path to PHP execution under ...

OpenAI on Monday unveiled a new cybersecurity-focused model called GPT‑5.6‑Cyber that it said is focused on vulnerability research, penetration testing, and incident response. "Built on GPT‑5.6 Sol, ...

A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create ...

Cloudflare has introduced Kitesurf, a cloud-hosted browser designed for AI agents instead of people. The company says the ...

A malicious change was made to the legitimate QuickFox VPN installer, allowing it to secretly download a backdoor onto Windows PCs, according to Fortinet.

More than 40 class-action lawsuits were filed against 23andMe as a result of the hacking. Those cases were centralized in U.S ...

Cloudflare's Kitesurf strips away browser features meant for human users to reduce compute and memory requirements for AI ...

Exclusive: The firm says it wants to future-proof its safety procedures and stay ahead of human attackers. OpenAI has built an LLM super-hacker called GPT-Red that it uses as a sparring partner to ...

The OWAReaper implant can establish server-side mailbox permissions that remain after credentials are changed and affected ...

New findings connect the same Pyongyang-backed group to four compromises dating to 2025, revealing a larger operation than ...