Google on Monday announced new security updates for Android that resolve more than 200 vulnerabilities, including two dozen critical-severity issues. The first part of the patches arrives on devices ...

Google has dismantled the 1.3 million-strong XCPE botnet, created and operated by Videostrong Technology, an Android OEM/ODM.

SecurityWeek tracked 37 cybersecurity merger and acquisition (M&A) deals announced by companies in October 2026.

Hackers breached Revolve’s online shopping platform and stole the personal and payment card information of at least 180,000 people.

Google promises a $250,000 root-in-cloud bug bounty reward for high-impact architectural flaws leading to admin control.

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

Chainalysis has disclosed a data breach after hackers used offensive agentic techniques to access its systems.

DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was ...

The FBI attributed the Binance hack to North Korea’s TraderTraitor and published over 600 attacker addresses as laundering ...

Ivanti has patched CVE-2026-111357 and CVE-2026-118527, two Connect Secure zero-days chained with CVE-2026-104935 in attacks.