Hackers are exploiting an unauthenticated remote code execution (RCE) vulnerability in the Samsung MagicINFO 9 Server to ...

Threat actors have been observed actively exploiting security flaws in GeoVision end-of-life (EoL) Internet of Things (IoT) ...

Security researchers at Aon have discovered a threat actor who bypassed SentinelOne EDR protection to deploy Babuk ransomware ...

In Q1 2025 there were 20.5 million DDoS attacks In the whole 2024 there were 21.3 million Hyper-volumetric DDoS attacks are ...

Cybersecurity company SonicWall has warned customers that two older vulnerabilities impacting its Secure Mobile Access (SMA) ...

Prompt injection flaws in Anthropic’s MCP and Google’s A2A protocols enable covert data exfiltration and AI manipulation.

This glossary includes the most common terms and expressions TechCrunch uses in our security reporting, and explanations of ...

CISA has flagged a critical-severity Commvault vulnerability as exploited one week after technical details were released.

The unrestricted file upload flaw is likely being exploited by an initial access broker to deploy JSP web shells that grant ...