A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows. The campaign was ...

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...

Socket researchers linked 152 Chrome wallpaper extensions to hidden data logging, fake Google search traffic, and ad ...

Chrome's WebMCP guidance warns that AI agents can be manipulated through the tools they are built to trust.

CVE-2026-48907 in the Joomla JCE plugin lets unauthenticated attackers drop PHP web shells with a single crafted request.

Veteran journalist says executives pushed unverified claims and gave politicians a say in interviews The longtime 60 Minutes correspondent Scott Pelley, who was fired by CBS News on Tuesday after ...

CISA added CVE-2026-42271, a high-severity LiteLLM command injection flaw, to its KEV catalog after evidence of active ...

The personal assistant who injected "Friends" star Matthew Perry with a fatal dose of the hallucinogenic drug ketamine was sentenced to 41 months in federal prison on Wednesday, bringing to a close ...

Now sites have a new way to spy on their visitors: measuring subtle interactions with their solid-state drives. The technique, named FROST (fingerprinting remotely using OPFS-based SSD timing), allows ...

According to Baldwin County Sheriff’s Office online booking records, Kaitlynn Grace Dominick, 22, of Daphne, was arrested on May 26. She was charged with manslaughter and aggravated child abuse ...

MATTHEW Perry’s live-in assistant has been jailed for three years and five months after injecting the actor with ketamine and leaving him alone to die. Kenneth Iwamasa, 60, learned his fate as he ...

FOLEY, Ala. (WALA/Gray News) - An Alabama mother is facing charges after investigators say she caused the death of her 1-year-old son by giving him a chemical mixture through his feeding tube.