New research has uncovered that publishers of over 100 Visual Studio Code (VS Code) extensions leaked access tokens that ...

F5 confirms nation-state breach exposing BIG-IP source code and vulnerabilities; containment completed, customers urged to ...

Microsoft’s October 2025 Patch Tuesday fixes 183 flaws, including three exploited zero-days and two 9.9 CVSS bugs.

According to Adobe, the shortcoming impacts Adobe Experience Manager (AEM) Forms on JEE versions 6.5.23.0 and earlier. It was addressed in version 6.5.0-0108 released early August 2025, alongside ...

Chinese group Jewelbug hacked a Russian IT provider, exploiting Microsoft tools and exfiltrating data via Yandex Cloud.

CVE-2023-42770 - An authentication bypass that arises as a result of the Sixnet RTU software listening to the same port ...

The activity, per ReliaQuest, is the handiwork of a Chinese state-sponsored hacking group called Flax Typhoon, which is also ...

"Due to a deserialization vulnerability in SAP NetWeaver, an unauthenticated attacker could exploit the system through the ...

"Attackers are leveraging the unauthenticated command injection in ICTBroadcast via the BROADCAST cookie to gain remote code ...

Researchers expose Discord webhook C2 in npm, PyPI, RubyGems; North Korean actors published 338 malicious npm packages with ...

Pixnapping side-channel can steal 2FA codes pixel-by-pixel on Android 13–16; CVE-2025-48561 patched Sept 2025 but workaround ...

Day, Ransomware Cartel & More | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect ...