The OpenAI bug bounty program raises payouts and adds bonuses with exceptional critical findings now eligible for up to $172,000.

ESET has been tracking a Russia-aligned group it calls Gorbag, which has been breaking into Ukrainian organizations since at least February 2025 using spearphishing attachments and a stealer that ...

Three weeks after the rattack on freezers in French supermarkets, similar cyberattacks have hit shops in other European ...

A hidden implant was reported in a Trezor hardware wallet sold by CryptoBilis, the reseller tied to $93M in Ledger thefts.

Google disrupted the XCPE botnet, a backdoor built into the firmware of more than 1.3 million Android TV set-top boxes by ...

HackerOne CEO Kara Sprague on how AI bug bounty programs are changing payouts, report quality, and what human hackers still do better.

The IPFire project has released fireperf, an open-source measurement tool that opens connections at a fixed rate and reports what the device in the middle did with each one. It is free software aimed ...

The security researcher who earlier this month published a proof-of-concept (PoC) exploit for a zero-day privilege escalation vulnerability in Microsoft Defender is back with two more. The first, ...

As a Cyber Security Architect, you will design security architectures for telecommunications networks, platforms, and cloud environments. You will define security frameworks, assess risks, conduct ...

HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more. AI found it: ...

CISA added two new Ivanti Connect Secure vulnerabilities (CVE-2026-111357, CVE-2026-118527) to its Known Exploited Vulnerabilities catalog.

FBI confirms North Korea was behind the $6 billion+ Binance crypto hack, while withdrawals resume and scammers target users.