The FBI removed an Accenture contractor after a missed PeopleSoft patch enabled ShinyHunters to breach its jobs site.

An alleged leader of Tren de Aragua’s ATM jackpotting activities, Canelon Aguirre was on the FBI’s top 10 most wanted list ...

Apple plans additional Full Disk Access controls in macOS amid growing risks posed by more capable and autonomous AI agents.

Thirty-nine cybersecurity-related merger and acquisition (M&A) deals were announced by companies in September 2026.

Eight NPM packages with 40,000 downloads have been delivering malware in the MALFEX supply chain attack campaign.

A company’s lawful access to Denmark’s Central Person Register was abused to steal the information of 8.8 million people.

Security awareness training falls short against social engineering, driving adoption of real-time AI detection tools to stop deepfakes ...

A cyberattack on Arizona’s court system stole personal information for more than a million people and is believed to have started when a court employee clicked a malicious link in an email.

Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Reward Program.

The ClingSTUN Linux backdoor targets dozens of vulnerabilities, sets up at-boot persistence, and contains exploits for self-propagation.

Hackers stole the information of over 250,000 people from Clover Health Investments and AngMar Management Services.

CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE.