Coruna and DarkSword exploit kits hack iPhones through malicious websites, stealing private data without apps or user interaction.

Hackers are using Coruna and DarkSword exploit chains across a large web network to compromise vulnerable iPhones without ...

How OpenAI's AI agents escaped an eval sandbox, built a secret message board, and hacked Hugging Face, plus 8 lessons for ...

From AI-discovered PHP vulnerabilities to flaws in Node.js and popular AI tool LiteLLM, cybersecurity teams have plenty to ...

Since late 2025, a cybercrime ecosystem has rapidly taken shape around a clear objective: exploit vulnerabilities in older iOS versions to steal Web3 private keys and crypto assets. At its core are ...

For two decades, software security rested on a comfortable assumption: when a flaw is found, you get a window — 30, 60, sometimes 90 days — to patch before attackers weaponize it. Chainguard's Patrick ...

IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by Node.js and other software. The vulnerability is ...

Security roundup: PHP2Shell, eMudhra certificate failures, Node.js security fixes and the LiteLLM supply-chain attack reshape ...

The Coruna iOS exploit kit now ships with a DarkSword iOS 18 chain on 608 domains. zLabs breaks down its delivery, native ...

For much of the past two years, the AI market has been defined by a small group of U.S. companies operating at the frontier ...

A critical remote code execution flaw in OpenCode has been patched. The standard defender toolchain cannot see that. Anomaly, ...

A series of major cybersecurity incidents, from critical PHP and Node.js vulnerabilities to malware infiltrating LiteLLM, has ...