CYBER ATTACK

A new cyber threat group, linked to Pakistan, has initiated a campaign targeting government and defense institutions in India and Afghanistan. The.

Identity Threat Detection & Response (ITDR) Tools: Our Top Picks by Use Case Quick Answer: ITDR buying aligns with your identity estate This article.

Discover how Deploying agency-based AI in the enterprise is no longer a choice – it’s essential for survival. AI agents enhance efficiency, cut costs, and.

For several years, the forecast has been consistently predicting: AI lowers the skill barrier, AI writes novel malware, and AI will soon execute attacks.

North Korean cybercriminals, known as WaterPlum (formerly Contagious Interview), have infected over 30,000 devices in 100 countries, primarily targeting.

Four newly disclosed Linux kernel vulnerabilities could enable local attackers to corrupt kernel memory and elevate privileges to root on affected.

A newly disclosed Windows zero-day vulnerability affects the Steam Client Service, potentially allowing a standard local user to gain NT AUTHORITY\SYSTEM.

Heavygram is a Windows surveillance backdoor that leverages Telegram as a command and control center for attackers. Indicators of compromise (IoCs): -.

Researchers have discovered a sophisticated multi-stage cryptomining campaign that employs PowerShell, Registry-stored payloads, DNS TXT records, PNG.

WordPress administrators are being advised to upgrade after researchers revealed Click2Shell, an exploit chain capable of enabling remote code execution.

A new attack method called "BragJack" enables malicious browser extensions to seize trusted communication channels used by AI assistants in Chrome, Edge.

Best SaaS Security Posture Management (SSPM) Tools for Every Business Size Quick Answer: AppOmni and Obsidian excel in enterprise-level SSPM.

WordPress 7.1.1, a security and maintenance update, addresses 11 vulnerabilities in the popular content management system This article explores wordpress.

A significant vulnerability in the Tutor LMS WordPress plugin could enable low-privileged users to execute remote code and deploy web shells on vulnerable.

The free floor is surprisingly robust here: Harbor (CNCF registry with scanning and signing) and Anchore's Grype/Syft (scanning and SBOM generation) cater.

In Thailand, a college’s web server operates in tandem with its normal functions This article explores page legitimate domain. . Beneath the surface, it.

Researchers have discovered a larger command-and-control (C2) network linked to SpiceRAT activity targeting government, energy, and telecommunications.

Researchers utilized Anthropic’s Claude Opus 5 to exploit an image-decoder vulnerability, compromising OpenAI’s community forum, taking over employees’.

Plugin4Shell is a severe vulnerability affecting major AI coding tools, including Anthropic Claude, OpenAI Codex, GitHub Copilot, and Google Gemini CLI.

A significant Visual Studio Code security vulnerability allows attackers to gain persistent access to a developer’s workstation by clicking on malicious.

Discover how Silent Push cybersecurity researchers have identified a suspected North Korean IT worker operation that recruits foreign nationals as proxies.

A newly discovered malware framework called MovieReaper is spreading through malicious torrent downloads that appear as popular movies This article.

Researchers revealed how attackers with root access to a Kubernetes node can impersonate workloads and obtain their machine identities in SPIFFE/SPIRE.

A widespread text-message phishing campaign impersonates T-Mobile, tricking customers into visiting fraudulent reward-redemption pages. The messages claim.

Threat actors are exploiting the growing popularity of ChatGPT by sending out fake subscription-payment emails that create a sense of urgency and direct.

A threat actor is allegedly selling a private remote code execution exploit for Fortinet FortiGate SSL VPN appliances, targeting FortiOS 7.2.x and 7.4.x.

GPT4Free’s hosted chat service, g4f.dev, has sparked privacy concerns following a research discovery that user prompts traverse multiple providers.

Docker addressed two critical vulnerabilities in Docker Sandboxes, allowing a malicious guest workload to escape its designated shared workspace and.

Discover how The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued guidance that advises organizations to utilize cyber decoys to.

Check Point has released an urgent security fix for a critical stack-based buffer overflow vulnerability in CVE-2026-91843, affecting security management.