Attackers exploit two PaperCut flaws to steal credentials from U.S. and European education organizations.

A Utah investigation found educational apps collecting unauthorized student data and sharing information with third parties and advertisers.

A 15.5 GB file of 7.3 million chess.com user records is circulating free on two leak forums. We verified it: the data is genuine and days old, but the shape points to scraping, not a breach.

Comparitech’s analysis of incidents in the first half of 2026 finds that the emergence of The Gentlemen ransomware has resulted in surge in attacks against higher education

Chinese hackers took control of a target organization's authentication stack and maintained persistence for 10 years, with full visibility into the administrative activity.

You and me go ChatGPhish-ing in the dark

A proof-of-concept exploit (PoC) shows how someone with admin privileges can exploit the issue to steal passwords, and thus use them to engage in further malicious activity.

The attackers are believed to have gained access to the internal networks of OLV Pulhof, a secondary school in the Berchem district of Antwerp, shortly after the Christmas break.

Russia-linked hacking group Fancy Bear is exploiting a brand-new vulnerability in Microsoft Office, CERT-UA says

In matching, brilliant blue suits, David Byrne and his band squeeze behind the Desk to perform four songs, including Talking Heads' "Life During Wartime."

American cybersecurity firm CrowdStrike has confirmed that an insider shared screenshots taken on internal systems with hackers after they were leaked on Telegram by the Scattered Lapsus$ Hunters thre...

Artificial intelligence can design toxins that evade security controls.

The complaint accuses DOGE of bypassing security protocols to move Americans’ sensitive personal data outside federal oversight and onto an insecure AWS cloud instance, potentially violating establish...

: Some custom malware, some legit software tools

A new lawsuit has accused Roblox of knowingly enabling the 'systemic sexual exploitation and abuse of children across the United States.'

Mercedes, Skoda, and Volkswagen vehicles, as well as untold industrial, medical, mobile, and consumer devices, may be vulnerable to an attack chain called "PerfektBlue."

Hackers are exploiting a critical privilege escalation vulnerability in the WordPress theme "Motors" to hijack administrator accounts and gain complete control of a targeted site.

Customs and Border Protection has swabbed the DNA of migrant children as young as 4, whose genetic data is uploaded to an FBI-run database that can track them if they commit crimes in the future.

Despite a huge media fanfare in which Colossal Biosciences claimed to have resurrected the extinct dire wolf, the company's chief scientist now concedes that the animals are merely modified grey wolve...

A critical privilege escalation vulnerability has been discovered in the premium WordPress theme Motors, which allows unauthenticated attackers to hijack administrator accounts and take complete control of websites.

U.S. energy officials are reassessing the risk posed by Chinese-made devices that play a critical role in renewable energy infrastructure after unexplained communication equipment was found inside some of them, two people familiar with the matter said.

YouTube video by forcedcoitus

Attack that started in April and remains ongoing runs malicious code on visitors’ devices.

FBI releases list of 42,000 phishing domains linked to dismantled LabHost platform. #Cybersecurity #Phishing #FBI