Meta starts addressing WhatsApp vulnerabilities that expose user metadata that allows adversaries to ‘fingerprint’ a device’s ...

Citizen journalists film alleged fraudulent daycare addresses in Washington, claiming 539 centers list Somali as primary ...

AI coding agents are highly vulnerable to zero-click attacks hidden in simple prompts on websites and repositories, a ...

What cyber trends and predictions are coming for 2026? Here’s your annual security industry prediction report roundup for the ...

Forbes contributors publish independent expert analyses and insights. Lars Daniel covers digital evidence and forensics in life and law. Dartmouth College has confirmed that a three-day cyberattack in ...

In its Android Security Bulletin for December, Google is pushing an especially large number of updates to address vulnerabilities across different components—and two of the flaws may have been ...

A zero-day vulnerability in Chromium-based browsers, identified as CVE-2025-10585, allows active exploitation through the V8 JavaScript engine's just-in-time compiler. Users are advised to update ...

With the end of the government shutdown comes reauthorization of the Cybersecurity and Infrastructure Security Agency. The Department of Homeland Security agency has released a series of cybersecurity ...

According to the Amazon Threat Intelligence team, attackers exploited bugs in Cisco and Citrix appliances before they were made public, deploying custom in-memory tooling against core identity ...

With 63 unique CVEs, Microsoft's November security update is considerably slimmer than the company's record-busting patch rollout last month, which contained fixes for as many as 175 vulnerabilities.

The LANDFALL spyware exploited a Samsung Galaxy zero-day (CVE-2025-21042) for nearly a year, targeting flagship phones via malicious DNG images sent through apps like WhatsApp. The sophisticated ...

US federal agencies have been told to patch a zero-day vulnerability used by threat actors since last year to deploy spyware to Samsung devices. The out-of-bounds write flaw CVE-2025-21042 has a CVSS ...