A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create ...

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor ...

Security researcher James Kettle tried to push the limit of AI’s hacking abilities—and discovered how effective it can be when combined with human expertise.

Meta on Thursday said that one of its artificial intelligence models accessed the internet on its own and hacked another ...

New findings connect the same Pyongyang-backed group to four compromises dating to 2025, revealing a larger operation than ...

Russia's Sandworm hacking group is using fake CAPTCHA prompts to infect Ukrainian devices with malware across ten-plus compromised websites, while hiding its command-and-control servers inside the ...

Black Hat USA 2026 – Las Vegas – Using email platforms to target users is nothing new in the world of threat actors. Nor is it revolutionary for defenders who've shored up guardrails when it comes to ...

Russian state hackers are using a maximum-severity vulnerability in Microsoft’s Outlook’s Exchange Server to backdoor ...

Laundry Bear exploits security flaw in unpatched Zimbra servers, stealing 90 days of emails and authentication data without ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices belonging to sensitive organizations in Ukraine, the latter country’s CERT ...

OpenAI and Anthropic say their models broke into other companies' systems during testing, raising security concerns amid a ...

OWAReaper malware, deployed by Russian state hackers Laundry Bear against US and European government agencies and ...