The GhostAction campaign has reportedly compromised around 1,900 GitHub accounts and targeted more than 30,000 repositories to steal CI/CD secrets, cloud credentials and API keys.
Next.js has released an emergency security update fixing critical remote code execution vulnerabilities and a denial of service issue affecting certain applications using caching and SVG processing features.
Anthropic researchers warn that future AI models could potentially replicate across internet connected devices without human control, highlighting emerging security challenges.
A critical CVSS 10.0 vulnerability in Bricksforge WordPress plugin is being exploited in the wild, allowing unauthenticated attackers to execute PHP code on affected websites.
Threat actors are exploiting AhsayCBS vulnerabilities to gain remote access, deploy web shells, and install XMRig cryptocurrency miners disguised as Microsoft Edge processes.
Anthropic has introduced OSS Scanner, a free AI powered vulnerability scanning service that helps open source projects identify security flaws and improve software resilience.
Security researchers have released a working exploit for a patched AnyDesk Linux vulnerability that could enable pre authentication remote code execution with root privileges on affected systems.
Proofpoint Voice of the CISO 2026 report highlights how AI governance, human risk, board expectations and data protection are reshaping cybersecurity priorities for CISOs.
Anthropic has expanded its Cyber Verification Program, giving vetted security teams access to Claude models while reporting thousands of vulnerabilities discovered through Project Glasswing.
Google has temporarily paused product vulnerability rewards under its Open Source Software Vulnerability Reward Program after a significant increase in invalid automated security reports.
F5 highlights the importance of AI security, governance, API protection and workforce visibility as enterprises across Oman accelerate artificial intelligence adoption under Oman Vision 2040.