Active exploits, nation-state campaigns, fresh arrests, and critical CVEs — this week's cybersecurity recap has it all.

Despite the AI-driven software stock meltdown, America’s largest corporations aren’t ditching their core business software just yet. Instead, they’re using the moment to squeeze better deals from ...

CVE-2026-21992 can be used without authentication for remote code execution and it may have been exploited in the wild. Oracle on Friday issued out-of-band updates to patch a critical vulnerability ...