A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious ...

Ghost CMS flaw CVE-2026-26980 enabled attacks on 700+ sites, injecting ClickFix malware through fake CAPTCHA pages.

A hypersonic missile, which reportedly travels over 10 times the speed of sound, was used, Russia has confirmed.

Packagist packages hid malicious package.json scripts, enabling Linux binary execution during installs and workflows.

CVE-2026-5426, a hardcoded ASP.NET machineKey in KnowledgeDeliver, was exploited as a zero-day in ViewState deserialization ...

Hackers exploited a critical zero-day vulnerability in a server running the KnowledgeDeliver learning management system (LMS) to deploy the Godzilla web shell.

GitHub’s internal repositories — now staged publishing in npm 11.15.0 requires a human 2FA approval before any package goes ...

Sites belonging to major universities such as Harvard and Oxford, as well as DuckDuckGo, have been compromised in the attack.

A 39-year-old man has died after being attacked by a shark on Sunday while fishing on the Great Barrier Reef, police said, ...

Health workers responding to a rapidly spreading outbreak of a rare type of Ebola in eastern Congo face two threats. They risk contracting the virus and encounter hostility from wary ...

Reported over three years ago and allegedly still not properly fixed, the vulnerability enables attacks to execute JavaScript ...