After a week away recovering from too much turkey and sweet potato casserole, we’re back for more security news! And if you ...

While the September 2025 Shai-Hulud attack focused primarily on credential harvesting and self-propagation, this new variant introduces several critical capabilities that represent a fundamental shift ...

The attackers have learned from their mistakes and have now developed a more aggressive version of the worm. It has already stolen over 27,000 credentials.

Critical RSC flaws in React and Next.js enable unauthenticated remote code execution; users should update to patched versions ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday formally added a critical security flaw impacting ...

Multiple China-linked threat actors began exploiting the React2Shell vulnerability (CVE-2025-55182) affecting React and ...

Felix is Autocar's deputy editor, responsible for leading the brand's agenda-shaping coverage across all facets of the global automotive industry - both in print and online. He has interviewed the ...

Attacks against CVE-2025-55182, which began almost immediately after public disclosure, have increased as more threat actors ...

React2Shell (CVE-2025-55182) is under active exploitation by Earth Lamia and Jackpot Panda, risking over two million ...

BYD will stop using rotating touchscreens as it ramps up the use of third-party apps and platforms in its cars. Rotating touchscreens were a headline feature of BYDs during the initial phase of the ...