CYBER ATTACK

Cybercriminals have set their sights on Android users through a well-crafted phishing scheme that disguises malicious applications as beta-testing.

An enormous attack surface that includes old Microsoft Internet Information Services (IIS) servers This article explores iis daily vulnerable. . On March.

A major supply chain attack is growing in the cybersecurity world. After a recent breach of the GitHub aquasecurity/trivy-action repository, Socket's.

Oblivion RAT is a new Android remote access trojan that has appeared on cybercrime forums This article explores makes iverify malware. . It is a very.

A new Android remote access trojan called Oblivion RAT has appeared on cybercrime networks as a full malware-as-a-service (MaaS) platform, turning fake.

MioLab, also known as Nova, is a highly advanced macOS infostealer that is now one of the most advanced Malware-as-a-Service (MaaS) platforms that targets.

Between November 2025 and February 2026, a coordinated spying campaign hit a Libyan oil refinery, a telecom company, and a government agency This article.

Cloud Software Group has put out urgent security patches for NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) This.

This March, the Trivy ecosystem had its second big security breach. The first was a supply-chain attack that made the official GitHub Action used to run.

Researchers have found a huge global security risk that comes from using old Microsoft Internet Information Services (IIS) servers This article explores.

CanisterWorm is a self-propagating malware campaign that is bringing a new wave of supply chain attacks to the npm ecosystem. The threat, which is.

The supposed AstraZeneca data breach shows that the LAPSUS$ hacking group is back in action. They are now quietly selling claims of deep access to source.

According to new research, hackers are actively using a serious flaw in Quest KACE Systems Management Appliance (SMA) to get into systems without.

After a breach involving its outsourcing partner, Telus, a threat actor is said to have stolen about 100 GB of private user data from Crunchyroll, the.

A new malware campaign is going after businesses in the healthcare, government, education, and hospitality sectors This article explores purelog stealer.

The Known Exploited Vulnerabilities catalog now includes a serious flaw in Craft CMS (CVE-2025-32432) that has been confirmed to be actively used in the.

CISA has warned that a serious Craft CMS vulnerability, tracked as CVE-2025-35939, is now being actively exploited. This means that attackers who don't.

CISA warns that DarkSword iOS exploit chain is linked to Apple vulnerabilities. This is an urgent warning about three serious Apple vulnerabilities that.

Nine serious security holes have been found in four popular low-cost IP-KVM devices by researchers who recently did a security assessment. These holes.

Security experts have found a very advanced npm supply chain attack called CanisterWorm This article explores makes wormable threat. . The campaign, which.

Microsoft has released an out-of-band (OOB) update for Windows 11 versions 25H2 and 24H2, known as KB5085516, to fix a serious sign-in bug that was caused.

A huge campaign to deface websites has successfully hacked more than 7,500 unique Magento e-commerce domains, allowing unauthorized text files to be.

A hacker is said to have stolen about 100 GB of personally identifiable information (PII) from Crunchyroll, the Sony-owned anime streaming giant This.

QNAP has sent out an urgent security warning about a serious flaw in its QVR Pro app that could let attackers from outside the company get full access to.

A new wave of security research has found serious flaws in low-cost IP-KVM (Keyboard, Video, Mouse) devices, which is very worrying for businesses This.

Threat actors are using a complicated, multi-stage malware campaign to spread the PureLog Stealer This article explores malware campaign spread. . This.

Oracle recently sent out an urgent security alert about a serious Remote Code Execution (RCE) flaw that affects both Oracle Identity Manager and Oracle.

Oracle has sent out an out-of-band Security Alert about a serious remote code execution (RCE) vulnerability, CVE-2026-21992, that affects two widely used.

The March Update for Windows 11 Breaks Teams Microsoft has admitted that a major bug in its March 2026 cumulative update is stopping Windows 11 users from.

Discover how A new version of the VoidStealer infostealer has gotten a lot of attention from security experts because it was the first malware to get.