A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere ...

Microsoft says Windows Server 2016 will stop receiving security updates after it reaches the end of support in January 2027.

Fintech company Revolut is working to resolve a massive outage that disrupted most of its services worldwide earlier today.

The PHP security team is warning administrators to prepare for emergency security updates tomorrow to address two critical ...

Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as ...

Certificate authority eMudhra revoked eight compromised intermediate certificates after researchers found their private keys ...

The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tracked collectively as PHP2Shell.

F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity ...

Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backup ...

CJIS v6.1 requires agencies to maintain strong authentication, account security, and audit controls while demonstrating ...

Microsoft announced that IT administrators can now use quick machine recovery on Windows Server 2025 after installing the October 2026 security update.

GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers.