Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted ...

Sysdig says JADEPUFFER used CVE-2025-3248 in Langflow to automate intrusion, credential theft, encryption, and data wipe.

They're not bad; they're just prompted that way. Sysdig threat hunters documented what they say is the first-ever documented ...

OpenAI API costs can spiral when agents run wild. Here's how to set spend limits, enable hard caps, and avoid surprise AI ...

Arctic Wolf says Anubis affiliates abused RMM tools, VPN logins, RDP, PsExec, and cloud-transfer tools before ransomware ...

After two months of cutbacks by the National Institute of Standards and Technology (NIST) on CVE enrichment, new research reveals some concerning trends that could make it harder for security teams to ...

Apple has begun sending lock-screen notifications to a subset of iPhone users, alerting them that their devices face active ...

Attackers exploited Langflow vulnerability CVE-2025-3248 to conduct an agentic AI-powered ransomware attack involving reconnaissance, credential theft, and lateral movement.

Cybersecurity surveys tend to focus on the user and the enterprise. But how secure are the processes of our software ...

The infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp.

Citrix has patched five NetScaler ADC and NetScaler Gateway vulnerabilities, including a high-severity defect similar to CitrixBleed.

Gamaredon hacking group escalated its decade-long espionage campaign against Ukraine in 2025, exploiting a weaponized WinRAR ...