A critical vulnerability in mcp-remote (CVE-2025-6514) allows remote code execution, affecting 437,000+ users.

A cryptocurrency social engineering campaign uses fake AI and gaming companies to deliver malware on Windows and macOS, ...

U.S. companies are using generative AI, raising concerns about data privacy, compliance, and operational risks.

ServiceNow's CVE-2025-3648 flaw exposes sensitive data across multiple tables, impacting all users with misconfigured ACLs.

Four individuals were arrested in connection with £440M cyber attacks on Marks & Spencer, Co-op, and Harrods, linked to the ...

The altered app packs in two extra executables within Termius Helper.app, a loader named ".localized" that's designed to ...

Hackers are exploiting Shellter’s leaked Elite license to distribute Lumma Stealer, SectopRAT, and more. This affects ...

The IT worker scheme, also tracked as Nickel Tapestry, Wagemole, and UNC5267, involves North Korean actors using a mix of ...

Anatsa banking malware targets North American users via Google Play, leading to credential theft and financial fraud ...

Gold Melody uses ASP.NET vulnerabilities for long-term access, impacting various industries across Europe and the U.S.

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

The activity has been attributed by Recorded Future's Insikt Group to a threat actor tracked as TAG-140, which it said ...