Three popular plugins served malicious JavaScript through a compromised CDN.
Varonis found a way to chain three bugs into one exploit that can lead to data exfiltration.

The cybersecurity industry is confronting a new reality: traditional vulnerability management is no longer enough. As enterprises rapidly deploy AI-powered applications, autonomous agents, and large language model (LLM) infrastructure, security teams a…
Google warns of ongoing data theft campaign attributed to Chinese nation-state attacker.

One of the largest open-source package repositories just spent a weekend cleaning up after a malware campaign that did not break into anything. It did not need to. Attackers seized control of more than 1,500 packages in the Arch User Repository, or AUR…

For most of the past decade, the security industry quietly gave up on prevention. Breaches were treated as inevitable, and the money went into detecting and cleaning up the mess afterwards. A new startup from two veterans of that industry says AI has m…

The European Parliament voted on Tuesday to lift the parliamentary immunity of Fulvio Martusciello, clearing the way for Belgian prosecutors to pursue bribery allegations linked to Chinese tech giant Huawei. The vote was 344 in favour, 234 against, wit…
The restrictions include a nationwide ban on Telegram until June 22 and a requirement to disable the app’s message editing feature.