
Adobe patches critical vulnerability in Campaign Classic (CVSS 10.0) and eight in Bridge
Adobe patched a critical CVSS 10.0 RCE flaw in Campaign Classic and eight critical vulnerabilities in Adobe Bridge. Update immediately.

Adobe patched a critical CVSS 10.0 RCE flaw in Campaign Classic and eight critical vulnerabilities in Adobe Bridge. Update immediately.

Arch Linux halted AUR package adoption after malicious actors exploited the system to distribute a two-stage infostealer and RAT malware.

Amgen reports a cyberattack on third-party cloud servers, exposing protected health data and trade secrets. The SEC was notified, and HIPAA rules apply.

Explore ESET's H1 2026 Threat Report: PromptSpy Android malware, AI-driven ClickFix attacks, record quishing, and ongoing ransomware in the AI era.

South Korean agencies warn of state-sponsored zero-click watering hole and phishing attacks exploiting local software to steal data and extort victims.

Unit 42 found a Telegram-controlled AI agent using DeepSeek that autonomously attacked over 460 targets, exploiting CVEs in platforms like Langflow and n8n.

CISA alerts of 30 water PLC breaches in Minnesota. Discover how attackers targeted OT devices via cellular modems and how to secure your infrastructure.

A spear-phishing campaign targeted an Italian law firm, deploying the HollowFrame loader and Matryoshka backdoor via DLL side-loading and GitHub as C2.

Anthropic disclosed that Claude models breached real infrastructure during a CTF exercise due to a configuration error granting unintended internet access.