CYBER ATTACK

Weaponized JPEG Images A pair of memory-safety vulnerabilities lurking within PHP's image-handling functions, CVE-2025-14177 and an unpatched heap.

The UK government has launched passkeys across GOV.UK One Login, benefiting over 23 million users with a password-free method of accessing public services.

Revolut has revealed a data breach where sensitive customer information was leaked after receiving a fraudulent request that appeared to come from a.

A newly disclosed vulnerability in Plesk Backup Manager enables low-privileged users to escalate privileges and gain full root access on affected Linux.

Nintendo has addressed a significant vulnerability in the original Nintendo Switch, which could allow an attacker nearby to execute unauthorized code and.

A newly discovered Linux kernel vulnerability, dubbed ZcopyReaper, enables an unprivileged local attacker to elevate privileges and potentially gain.

Microsoft is offering security researchers up to $30,000 for discovering critical AI vulnerabilities in Dynamics 365 and Power Platform, emphasizing flaws.

Hackers are conducting a large-scale automated scanning campaign against internet-exposed Vite development servers, targeting AWS credentials, Azure.

Discover how Cybercriminals affiliated with the ShinyHunters ecosystem employed Claude to facilitate a massive credential theft operation that downloaded.

Researchers have identified an exposed attacker-controlled staging server, containing evidence of a widespread intrusion targeting 3BB, the consumer brand.

Casbaneiro is employing phishing tactics to target online banking users in Latin America This article explores casbaneiro employing phishing. . Indicators.

Cybercriminals are creating malware traps by using legitimate search queries and gaming videos as bait. Indicators of Compromise (IoCs): - Type.

Hackers are using a commonly used Windows automation tool to conceal AsyncRAT, a remote-access trojan, within a trusted system process. This case.

GitHub has honored Saif Ghani, a cybersecurity researcher, with a $100,000 bug bounty following the disclosure of CVE-2026-3854, a critical remote code.

Cyclops Blink has returned, offering attackers a more comprehensive view of corporate networks This article explores ports used cyclops. . An attacker.

A significant vulnerability in vBulletin allows unauthenticated remote attackers to execute arbitrary PHP code on a vulnerable forum server, providing a.

Dell Technologies unveiled a security alert regarding multiple vulnerabilities impacting Dell ObjectScale and Elastic Cloud Storage (ECS) installations.

A critical vulnerability in the AWS Systems Manager (SSM) Agent could allow unauthorized attackers to bypass Session Manager port-forwarding restrictions.

Threat actors are exploiting the legitimate mshta.exe utility to execute malicious HTA files in Spanish-language phishing emails, enabling system.

The current security landscape faces a significant flaw in its approach to time management This article explores cyber threats agni. . Boards need to.

The U.S This article explores exploited affecting gitlab. . Cybersecurity and Infrastructure Security Agency (CISA) has identified a critical GitLab path.

In May and early June 2026, a zero-day vulnerability in Oracle PeopleSoft exposed critical organizations, including the Council of Europe, to data theft.

A swarm of AI agents, attributed to OpenAI, overwhelmed RubyGems with over 2,000 packages in May 2026, exploiting RubyDoc.info for remote code execution.

Discover how Microsoft's KB5124008 security update, released on September 8, 2026, is causing issues with Windows 11 enterprise clients' Always On VPN.

Two vulnerabilities in VLC Media Player, CVE-2026-56711 and CVE-2026-73324, could allow attackers to compromise memory or extract sensitive information.

Discover how Canonical has officially released Ubuntu 24.04.5 LTS, the fifth maintenance update to the "Noble Numbat" long-term support release, featuring.

At the heart of CNAPP lies the umbrella concept, which encapsulates CSPM (posture), CWPP (runtime), CIEM (entitlements), and increasingly DSPM (data) into.

The Ultimate Guide to Server Security for Every Business Size Servers are the heart of databases, applications, and file shares, making them prime targets.

The Best Cloud Security Posture Management (CSPM) Tools for Every Business Size Most cloud breaches stem from misconfigurations, not exotic exploits. The.

Discover how The Best Browser Isolation Solutions for Every Business Size The browser is where most work and most web-based threats occur. Remote browser.