CVE-2026-48907 and a LiteSpeed cPanel plugin flaw are under active attack, exposing Joomla sites and shared hosting servers to compromise.

Researchers reveal iPhone BootROM vulnerability impacting A12, A13 and Apple Watch, enabling SecureROM code compromise via USB controller flaw.

Nintendo confirms employee survey data was exposed in the TinyPulse cyberattack while Shadowbyt3$ claims broader data theft and a $2M...

RoguePlanet (CVE-2026-50656) exploits a Windows Defender TOCTOU flaw, enabling SYSTEM privilege escalation on fully patched Windows devices.

Advait Patel discusses how SRE and security are converging in cloud systems, from IAM and DevSecOps to AI-driven observability and...

The SearchLeak vulnerability let attackers steal data from Microsoft 365 Copilot Enterprise through a malicious link before CVE-2026-42824 was fixed.

The iRhythm data breach involved unauthorized access to sensitive patient and company data, prompting an investigation and SEC filing.

Google has sued the developers of the Outsider AI phishing kit, alleging Gemini misuse and linking the operation to over...

A critical Splunk Enterprise flaw, CVE-2026-20253, could enable unauthenticated file operations and remote code execution.

This week’s weekly roundup covers AI security controls, Microsoft's Patch Tuesday, CBSE audits, UK court AI trials, and FIFA 2026...