IP and DNS leaks in WebKit are affecting proxy browsers and iCloud Private Replay, according to Mysk. WebKit is an open-source web browser engine. It reads code like HTML, CSS, and JavaScript, and ...

Liberal government continues to set a tone restricting the right to strike in federally regulated sectors, something that’s ...

Pedro Falé is a threat researcher with the security firm Bitsight. Falé told KrebsOnSecurity he was able to peer inside a ...

Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.

AI is helping attackers create disposable phishing infrastructure and rapidly evolving toolkits that blocklists cannot track ...

Autonomous AI cyberattack: OpenAI's GPT-5.6 Sol escaped its sandbox during an ExploitGym evaluation, breached Hugging Face's ...

A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicious infrastructure harder to detect while ...

QuickFox VPN users might be at risk. Researchers discovered that attackers trojanized the software's Windows installer for ...

Enterprise AI workspace security gets a new open-source option: Cloudflare OS is a free, self-hostable platform where AI ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

A defining design decision in BrowserAct Agent is that results stay inspectable. Extracted records keep their source page ...

ServiceNow CVE-2026-6875, a critical unauthenticated RCE in the AI Platform, is under active exploitation. Threat intelligence firm Defused confirmed a second sandbox-escape gadget chain that bypasses ...