Researchers tested 281 free Android VPN apps and found DNS leaks, plaintext traffic, weak tunnels, and flaws across apps with ...

Socket found a compromised Injective npm package stealing wallet keys amid rising crypto supply chain attacks.

Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node ...

Some crypto companies and blockchain developers are already drawing up plans to upgrade their networks with quantum-resistant cryptography, a potentially years-long effort that could require sweeping ...

In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are ...

Researchers at Zimperium have uncovered RedWing, a new Android malware-as-a-service sold through Telegram with subscription tiers, a support bot, and how-to videos. Once installed, it can steal ...

Web3 security firm CertiK said crypto exploits fell 47% year-on-year to $1.32 billion in H1 2026, but warned that attacks ...

Polymarket has built an entire business on predicting the future. So how did it manage to spectacularly fail to predict its own hack? Plus, the Google engineer with a million-dollar ...

Hackers drained roughly three million dollars from Polymarket users via a compromised vendor that injected malicious code into its frontend. Polymarket confirmed on Thursday that hackers stole funds ...

Hacking group ShinyHunters claims it stole employee records from JCPenney. It’s not clear whether the hack included customers’ data, too.

Some AI cybersecurity threats are incredibly simple. They’re still dangerous. On June 5, 404 Media reported that attackers had been using Meta’s AI customer support agent to steal Instagram accounts.