Archive
Older posts kept for reference. We stopped auto-publishing news here—guides and how-to content live in Learn now.
Mozilla, Google, Adobe, and VMware have released critical security updates to address multiple vulnerabilities, including two in Firefox with publicly available exploit code, urgin
Read more →
Microsoft's latest Patch Tuesday reveals a staggering 622 CVEs, including three zero-day vulnerabilities actively exploited, heightening urgency for enterprises to prioritize patch
Read more →
SonicWall has issued an urgent alert regarding active exploitation of two zero-day vulnerabilities in its SMA1000 series, urging immediate patching to prevent potential breaches.
Read more →
Email-based identity attacks have overtaken traditional exploits as the primary cause of ransomware incidents, with multifactor authentication (MFA) proving insufficient in 97% of
Read more →
SonicWall has issued an urgent warning regarding the active exploitation of two zero-day vulnerabilities in its SMA 1000 series appliances, with one flaw potentially allowing attac
Read more →
Intruder's AI-driven 'vulnerability vending machine' has unveiled a critical zero-day vulnerability in a popular WordPress plugin, showcasing the power and potential risks of autom
Read more →
In a significant move to bolster cybersecurity, Nigeria has introduced new regulations requiring organizations to disclose cyberattacks, aligning with global trends towards transpa
Read more →
Microsoft has paused the rollout of its latest Windows 11 security updates on certain Dell devices following reports of unexpected shutdowns and performance degradation, highlighti
Read more →
Researchers have uncovered TuxBot v3 Evolution, an IoT botnet framework potentially developed with large language model assistance, highlighting emerging threats in AI-driven cyber
Read more →
Zoom has issued a warning about a critical vulnerability in its Windows desktop client and SDK, which could allow unauthenticated attackers to hijack user accounts, posing signific
Read more →
Microsoft has released patches for a record-breaking 622 vulnerabilities, including two zero-day exploits affecting Active Directory and SharePoint Server, highlighting the urgent
Read more →
A newly discovered 2-click cursor exploit is enabling attackers to gain unauthorized access to developer environments, exposing sensitive source code and developer secrets, accordi
Read more →
In an unprecedented move, Microsoft has released patches for 622 vulnerabilities, including two zero-day flaws currently being exploited by attackers, marking its largest Patch Tue
Read more →
As federal support for election security diminishes, states are independently developing their own defense networks to safeguard electoral integrity, navigating a complex landscape
Read more →
In a significant move, the Pentagon has paused the rollout of CMMC Phase 2, signaling a reevaluation of cybersecurity requirements for defense contractors. This decision could resh
Read more →
In an unprecedented move, the UK and EU have jointly sanctioned Russian individuals and entities for orchestrating cyberattacks and disinformation campaigns, signaling a unified st
Read more →
In a groundbreaking move, the U.S. Treasury Department has sanctioned a VPN service provider and two individuals for facilitating ransomware attacks, signaling a strategic shift in
Read more →
A novel approach to vulnerability assessment allows organizations to determine exploitability without the risks associated with live exploit testing, according to a report from Ble
Read more →
In a significant crackdown, five UK residents have been charged for their roles in supplying fraudulent communication devices and apps linked to the Russian Coms platform, highligh
Read more →
A critical vulnerability in the popular AI coding platform, Cursor IDE, allows for the execution of malicious code from poisoned repositories, posing significant risks to developer
Read more →
In an unprecedented move, Microsoft has released patches for 570 security vulnerabilities, nearly tripling its previous record. This surge in patching is largely attributed to adva
Read more →
In a significant blow to cybercriminals, Spanish police have dismantled a sophisticated fraud syndicate responsible for €140 million in illicit gains through investment scams and b
Read more →
Two newly disclosed vulnerabilities in RabbitMQ could allow attackers to leak OAuth client secrets and compromise enterprise messaging infrastructure, posing significant risks to o
Read more →
A misconfigured server has inadvertently exposed three phishing operators using Evilginx, a tool designed to bypass multi-factor authentication (MFA), highlighting significant vuln
Read more →
Progress has issued an urgent advisory for customers to manually shut down their ShareFile Storage Zone Controllers due to a credible security threat, raising alarms across enterpr
Read more →
A misconfigured server has unveiled three sophisticated Evilginx phishing operations targeting Microsoft 365 users, highlighting the persistent threat of credential theft and the i
Read more →
A new phishing-as-a-service platform, Forg365, is targeting Microsoft 365 accounts using advanced techniques including device code phishing and adversary-in-the-middle tactics, pos
Read more →
In a controversial move, the European Parliament has extended the mass scanning of private communications without requiring warrants, a decision that has sparked significant privac
Read more →
OpenAI has temporarily eased restrictions on GPT-5.6 Sol usage following a significant increase in demand for its advanced AI model, raising questions about resource allocation and
Read more →
Nihon Kotsu, Japan's largest taxi operator, has been forced to shut down parts of its infrastructure following a significant cyberattack, highlighting vulnerabilities in critical t
Read more →
The Cybersecurity and Infrastructure Security Agency (CISA) has revealed a significant data breach involving internal credentials exposed on GitHub, underscoring critical security
Read more →
Lidl has alerted customers in Germany, Belgium, and the Netherlands of a data breach stemming from a hack on a service provider, potentially exposing sensitive personal information
Read more →
Debian 13.6's latest security update tackles a critical issue stemming from the expiration of a UEFI Secure Boot certificate authority, which has been a default component in most P
Read more →
The Australian Cyber Security Centre (ACSC) has issued a stark warning to organizations worldwide about an active exploitation campaign targeting Content Management Systems (CMS),
Read more →
CrashStealer, a new macOS information stealer, exploits a notarized dropper to bypass Gatekeeper checks, posing a significant threat to sensitive data on compromised systems.
Read more →
Jesse McGraw, once known as the blackhat hacker 'GhostExodus', has transformed from a high school hacker to a cybersecurity advocate, sharing insights on insider threats and cybers
Read more →
The Gentlemen ransomware group is leveraging an affiliate model to expand its reach and impact, posing a significant threat to enterprises worldwide, according to a detailed analys
Read more →
Anthropic has announced an extension for free access to its Claude Fable 5 AI model for paid subscribers until July 19, as the company maneuvers strategically in the competitive AI
Read more →
As AI technologies rapidly evolve, the absence of robust governance frameworks is leaving organizations vulnerable to a spectrum of cybersecurity threats, warns a recent analysis b
Read more →
A China-aligned threat cluster, UNK_MassTraction, has been actively exploiting Roundcube mailservers at physics and engineering departments in US and Canadian universities since Ma
Read more →
The June 2026 CVE Landscape report by Insikt Group® highlights a 49% increase in high-impact vulnerabilities, urging organizations to prioritize remediation of 60 critical threats.
Read more →
The Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities to its Known Exploited Vulnerabilities Catalog, highlighting active exploitation
Read more →
In a sweeping international effort, authorities have initiated Operation First Light 2026, targeting a sophisticated network of cybercriminals, while rival cyberspies have breached
Read more →
A recent report highlights a significant rise in cyber threats targeting industrial automation systems in Q1 2026, emphasizing the need for enhanced security measures across critic
Read more →
The RedHook Android malware has evolved to exploit the Wireless ADB feature, granting attackers shell-level access without physical device connection, posing significant risks to e
Read more →
Cyberattack attempts against the South Korean military surged to nearly 19,000 in 2025, marking the highest number in five years, according to a report by a South Korean lawmaker.
Read more →
Accenture, a leading global professional services company, has reported a significant data breach, underscoring the persistent cybersecurity challenges faced by large enterprises w
Read more →
Check Point Research has uncovered a new modular command-and-control framework employed by Cavern Manticore, an Iran-linked APT group, targeting Israeli IT providers and government
Read more →
A newly discovered vulnerability in the Squid proxy server, dubbed 'Squidbleed,' has been found to expose HTTP requests, posing a significant risk to organizations relying on this
Read more →
The Cybersecurity and Infrastructure Security Agency (CISA) has detailed its response to a significant security incident involving the exposure of sensitive AWS GovCloud credential
Read more →
In a significant data breach, AssuranceAmerica has confirmed that personal information of approximately 7 million individuals has been compromised, raising concerns over data secur
Read more →
Karen Vardanyan, an Armenian national, has pled guilty to orchestrating Ryuk ransomware attacks, potentially facing up to 15 years in federal prison and agreeing to pay nearly $1.2
Read more →