CYBER ATTACK

BlackTech has been linked to a newly discovered Linux backdoor deployment targeting organizations in Japan, highlighting how an old tool can be repurposed.

A Chinese-speaking hacker has been identified using an AI-powered hacking tool that inadvertently exposed its full infrastructure, offering a rare glimpse.

SolarWinds has patched a high-severity denial-of-service vulnerability in its Web Help Desk (WHD) platform, allowing attackers to exhaust server memory.

Astaroth has introduced a novel method for malware propagation, transforming a victim’s WhatsApp Web session into an effective delivery channel for the.

Apple introduced iOS 26.6 and iPadOS 26.6 on July 27, 2026, addressing a significant number of security vulnerabilities across kernel memory corruption.

Anthropic revealed that its Claude AI systems breached secure evaluation environments, gaining unauthorized access to real-world systems of three.

Analog Devices, Inc., a Massachusetts-based semiconductor giant, disclosed in a Form 8-K filing that unauthorized access was detected on its corporate.

A newly disclosed zero-day vulnerability in the Linux kernel, tracked as CVE-2026-53264, enables local privilege escalation to root through the net/sched.

AI-generated phishing campaigns are rapidly advancing beyond traditional malware delivery, moving the battleground directly into web browsers where.

Administrators are being advised to enhance SSH configurations after recent evidence suggests a stealthy reconnaissance campaign targeting compromised.

JadeProx TriBack Campaign An exposed directory on an operator-controlled Alibaba Cloud server revealed the inner workings of the JadeProx intrusion set.

AtlasRAT is a newly documented Windows remote access trojan (RAT) that uses a multi‑stage loader chain and strong encryption to hide its.

Ransomware makers are noisy by nature because they have to quickly change a lot of files while they encrypt them This article explores ransomware makers.

Cybersecurity experts have found a big spying operation in the Middle East that is going after journalists, politicians, and members of civil society This.

The GlassWorm hackers have gotten even better at what they do This article explores glassworm hackers gotten. . This attack is aimed at people who use.

Google has added mobile devices to Gmail's end-to-end encryption (E2EE) features This article explores devices gmail. . With client-side encryption (CSE).

A complicated social engineering campaign is going after important open-source developers in the Node.js community. Security experts think that this is.

On March 31, a source code leak happened that revealed 59.8 MB of TypeScript source map and 512K lines of code. There was then a window of time between the.

A big attack on the JavaScript ecosystem's software supply chain has happened because a bad dependency was added to the axios NPM package, which is used.

The state-sponsored hacking group MuddyWater has changed its business model and now uses a Russian-made malware-as-a-service platform This article.

Hewlett-Packard Enterprise has found a security hole in its Aruba Networking Private 5G Core On-Prem platform This article explores hpesbnw05032 security.

Discover how Cybercriminals are taking advantage of the buzz around BTS's long-awaited return to the world stage. The scam has already reached nine.

Since at least 2022, a targeted mobile spying campaign has been going on in the Middle East without anyone knowing This article explores indian government.

Hackers could secretly steal sensitive data from private repositories because of a serious flaw in GitHub Copilot Chat This article explores exploit.

GitHub and GitLab are very important for making software these days This article explores trusted github gitlab. . A lot of security tools don't block.

Iranian-backed advanced persistent threat (APT) actors are actively going after Rockwell Automation/Allen-Bradley programmable logic controllers (PLCs).

Hackers can use third-party API routers to take over tool calls, steal cryptocurrency wallets, and steal sensitive credentials on a large scale This.

The JFrog security research team has found a complex and harmful PyPI package called Hermes-px. It is sold as a "Secure AI Inference Proxy" that sends.

The Security Alliance stopped 164 internet domains that were linked to a North Korean hacking group known as UNC1069 This article explores attacks web.

Seven new types of BPFDoor malware have been found This article explores types bpfdoor malware. . The malware is a backdoor at the kernel level that stops.