The inaugural STAR Labs report ran real exploits on AI agents and found that 91% of successful attacks on productivity agents left no trace. MOUNTAIN VIEW, Calif., July 14, 2026 / ...

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

QR code phishing bypasses MFA, leading to data theft. How quishing attacks work, and what you can do to stay safe.  Ever had ...

Windows Defender zero-day CVE-2026-50656 — known as RoguePlanet — has been patched by Microsoft 29 days after researcher ...

Privacy-focused layer-1 blockchain Secret Network is proposing to move from its longtime home on Cosmos to Ethereum layer-2 ...

A newly-disclosed exploit in Claude Code’s ‘auto-mode’ leaves developers facing remote code execution (RCE) vulnerabilities ...

Exploit for "Bad Epoll" Linux kernel vulnerability (CVE-2026-46242) can lead to root access on desktops, servers, and Android ...

As AI helps hackers find exploits faster, Microsoft says it's now using AI as well. Expect more security fixes in future ...

A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal ...

Attackers have been caught exploiting a critical flaw in Oracle E-Business Suite's Payments module just six weeks after ...

Proofpoint says UNK_MassTraction exploited patched Roundcube flaws to target U.S. and Canadian university mail servers.

Summer.fi has paused all Lazy Summer Protocol vaults following an exploit that resulted in the theft of approximately $6 ...