Threat actors are exploiting CVE-2026-58138, a critical-severity remote code execution vulnerability in Orkes Conductor.

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Know what was tested before ...

Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites ...

Manifold Security found placeholder domains cited in 359,000 GitHub files and 349 AI agent skills serving cloaked scam ...

A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The ...

SlowMist confirms an active iOS exploit that steals crypto private keys via Safari, affecting iPhones running iOS 13 through 26.5.

Google PageBreak found over 500 verified XSS flaws across company web apps and plans closer CodeMender integration for code ...

The Chinese-speaking operator used three different open source AI harnesses - Strix, Cairn, and Hermes - to run the ...

Report URI CSP alerts surfaced a ClickFix campaign on compromised e-commerce sites using Base64 loaders and a fake verification overlay.

Security testing helps find vulnerabilities before attackers do. Learn how input validation, authentication, SAST, DAST and ...

Google has released a new security update for the Chrome browser, addressing a total of 12 vulnerabilities. Among these is a high-severity zero-day flaw that is currently being exploited in real-world ...

WordPress Click2Shell vulnerability lets attackers silently install themes on any admin’s site via a single crafted link, ...