Microsoft addressed 206 vulnerabilities in its June 2026 Patch Tuesday update, marking the vendor's largest monthly batch of security patches on record.
A ransomware attack on Dutch healthcare software vendor ChipSoft on April 7 forced the company to disable key digital platforms used by roughly 70% of Netherlands hospitals, triggering widespread logistical disruptions.
Microsoft researchers discovered a critical intent-redirection vulnerability in EngageLab's EngageSDK, a third-party Android SDK embedded in cryptocurrency wallet apps with over 30 million combined installs.
Google has launched Device Bound Session Credentials (DBSC) in Chrome 146 for Windows, cryptographically tying authentication sessions to a user's device so that stolen cookies become worthless to attackers.
A threat actor crafted a working exploit for a critical unauthenticated remote code execution vulnerability in the Python notebook platform Marimo just 9 hours and 41 minutes after its public disclosure, according to cloud security firm Sysdig.
Drift's post-mortem reveals a six-month North Korean social engineering campaign using fake companies, in-person cutouts, and malicious code that ultimately drained more than $280 million from the platform.
The UK government has proposed a criminal amendment that could imprison tech executives who fail to remove nonconsensual intimate images from their platforms, escalating earlier pledges of fines and service blocks.
Black Hat USA 2026 returns to Mandalay Bay Convention Center in Las Vegas from August 1–6, featuring four days of expert-led Trainings, a Summit Day, and a two-day main conference packed with Briefings and Arsenal tool demos.
Google has expanded Gmail's end-to-end encryption to all Android and iOS devices, letting enterprise users compose and read encrypted emails natively without extra apps or web portals.
Researchers at Machine Spirits uncovered nine vulnerabilities in the open source Orthanc DICOM server, tracked CVE-2026-5437 through CVE-2026-5445, enabling attackers to crash servers, leak sensitive data, and potentially execute arbitrary code remotely.