CYBER ATTACK

PortSwigger introduces Burp AT in public beta, integrating AI capabilities into its widely used Burp Suite Professional platform This article explores.

PHP has patched three security vulnerabilities in its latest updates, including high-severity flaws that can lead to SQL injection and out-of-bounds.

Phantom Mantis, formerly ArmCorp, operates under the "The Gentlemen" partnership program and offers affiliates a support function (LARVA-368) that.

OpenAI introduces Codex Security, an open-source command-line interface (CLI) and TypeScript SDK designed to help developers detect, validate, and.

Security researchers have discovered that the OctLurk malware framework is linked to a separate campaign targeting Kazakhstan's critical infrastructure.

In Central Asia, two custom-built backdoors called OctLurk and SilkLurk have compromised government networks This article explores silklurk compromised.

Microsoft has introduced a significant security enhancement to its Key Management Service (KMS) infrastructure, incorporating TPM-based hardware.

The Nightmare-Eclipse disclosure actor has released LegacyHive, its latest Windows proof-of-concept, following prior drops including GreenPlasma.

Six federal agencies have updated their joint cybersecurity advisory, warning of Iranian-affiliated threat actors exploiting internet-connected.

Claude AI faced a privacy issue this weekend after hundreds of private chat conversations were discovered in Google search results without users'.

Google's Chrome Security Team has unveiled a comprehensive overhaul of its vulnerability management pipeline, heavily relying on AI to expedite bug.

TAG-195, also known as Golden Chickens or Venom Spider, is a financially motivated MaaS developer closely associated with credential theft and remote.

Discover how Researchers have uncovered a large-scale operation of the Android Remote Access Trojan (RAT) known as Flying Eagle, linked to the leaked.

Discover how A sophisticated fraud operation targeting N26 users in Italy combines voice phishing with live phishing and remote access trojans to steal.

Europol intensifies its global crusade against "The Com," a decentralized extremist group behind cyberattacks and violent extremism across digital.

Since the first quarter of 2026, cybersecurity researchers at XLAB have been monitoring an increasing botnet family known as Dysphoria. The group’s most.

DPRK-linked threat actors are exploiting Ethereum smart contracts as a resilient command-and-control (C2) infrastructure in a sophisticated macOS malware.

Arctic Wolf Labs has discovered new CastleLoader campaigns employing digitally signed installers, Mark-of-the-Web (MotW) removal, and in-memory shellcode.

Cybercriminals are leveraging stolen email addresses from data breaches linked to the ShinyHunters hacking group to create more believable sextortion.

A significant remote code execution vulnerability exists in JetBrains TeamCity On-Premises, allowing unauthenticated compromise of servers This article.

SolarWinds has addressed a significant security flaw in its Web Help Desk platform, which could permit attackers to circumvent SAML-based authentication.

The PHP development team has identified three critical security vulnerabilities impacting core extensions, with patches released in versions 8.2.33.

A newly disclosed four high-severity vulnerabilities in libssh2, the widely used SSH library embedded in countless client applications, tools, and DevOps.

Adobe has released an urgent security update to address two significant vulnerabilities in Adobe Campaign Classic, allowing attackers to execute arbitrary.

Wiz Research revealed a significant vulnerability in Azure Cosmos DB's Gremlin API, known as CosmosEscape This article explores vulnerability azure.

The recent pause impacting the rollout of Cybersecurity Maturity Model Certification (CMMC) Phase II has understandably sparked inquiries within the.

The Cybersecurity and Infrastructure Security Agency (CISA) issued a critical alert on July 30, 2026, warning of escalating attacks against programmable.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding a surge in cyberattacks targeting internet-connected.

A Chrome extension with approximately 100,000 users has been caught silently exfiltrating full AI chat conversations to a remote server, even when users.

A significant security bypass vulnerability exists within Check Point's SmartConsole management platform, enabling unauthenticated attackers to gain full.