Open with CtrlK — press Esc to close
The UK's Government Digital Service has opened passkey sign-in to every GOV.UK One Login account, the login more than 23 million people use to reach government services online. Account holders can…
Google said on Sept. 10, 2026 that Android can now move saved passwords and passkeys straight from one password manager app to another, with no exported file at any step. That matters for anyone who…
Three researchers say a swarm of OpenAI's own AI agents was behind the wave of malicious packages that flooded RubyGems, the software archive for the Ruby programming language, in May. Spencer Kitts,…
The Netherlands' National Cyber Security Centre, the NCSC, said on Sept. 10, 2026 that it expects attempts to exploit two critical vulnerabilities in Check Point VPN products soon, and advised…
The U.S. Cybersecurity and Infrastructure Security Agency added a vulnerability in GitLab to its Known Exploited Vulnerabilities catalog on Sept. 11, 2026, saying the addition is based on evidence…
Attackers have been chaining vulnerabilities in JFrog Artifactory to take administrative control of self-hosted servers, and in several cases have left a backdoor behind, the cloud security company…
The threat-intelligence company GreyNoise says one attacker used hundreds of automated coding agents to break into at least 440 PaperCut NG/MF servers belonging to 395 organizations in 48 countries.…
Anthropic said on Sept. 10 that it had detected and shut down groups using its Claude models to run espionage campaigns, build surveillance tools, defraud people through fake dating apps and operate…
Cisco has confirmed that attackers are exploiting a flaw in its Secure Firewall Management Center software, and the U.S. Cybersecurity and Infrastructure Security Agency added the same vulnerability…
Adobe published an emergency hotfix on Sept. 7 for a flaw in Magento and Adobe Commerce that attackers had been using to break into live online stores since Sept. 4. Every version of the store…
N-able has shipped an emergency update for N-central, the software IT providers use to manage their customers' computers from a single console. The update, N-central 2026.3 Hotfix 4, was posted on…
The US Cybersecurity and Infrastructure Security Agency added CVE-2026-85046, a type-confusion flaw in Google Chrome's V8 JavaScript engine, to its Known Exploited Vulnerabilities catalog on Sept. 4,…