CYBER ATTACK

TeamPCP, a group that has been linked to high-impact supply chain attacks in the past, has hacked the popular Python library litellm on PyPI. This affects.

HackerOne, a well-known platform for coordinating vulnerabilities and bug bounties, has confirmed that a data breach has affected its employees after a.

Threat researchers have found a new malware campaign that uses Google Forms to spread the PureHVNC Remote Access Trojan (RAT). Instead of using fake.

Because generative AI models can be used so quickly, companies need to find a balance between innovation and strong security. To solve this problem.

Aqua Security has revealed a complex supply chain attack that put its popular open-source Trivy vulnerability scanner at risk, showing that modern CI/CD.

A complex supply chain attack that targets Aqua Security's Trivy, a popular open-source vulnerability scanner This article explores aqua security trivy.

Elastic Security Labs has found a new bad campaign that uses an undocumented loader called SILENTCONNECT to send out the ScreenConnect Remote Monitoring.

A recent security study showed that linking together what seem like small logic flaws in Dell Wyse Management Suite (WMS) On-Premises can lead to a full.

Discover how Cybercriminals behind Tycoon2FA, a phishing-as-a-service (PhaaS) platform, have started going after cloud accounts again with almost full.

TeamPCP, a group of hackers, has gone from stealing credentials or installing backdoors to something much worse with a new payload This article explores.

A persistent threat actor called Larva-26002 has been going after Microsoft SQL (MS-SQL) servers that aren't well managed This article explores ransomware.

Attackers have found a new way to spread malware by using Google Forms, which is one of the most trusted tools people use every day This article explores.

Why Your Monitoring Program Is Helping Attackers Win There is a type of threat monitoring that looks good on paper but doesn't work in real life This.

One of the most dangerous state-sponsored hacking groups in the world is actively going after Remote Desktop Protocol (RDP) servers in important.

Organizations can no longer ignore the new security issues that have come up because of the quick rise of generative AI. Microsoft has now laid out a.

Google has officially added Gemini AI agents to Google Threat Intelligence so that they can automatically watch dark web forums in public preview. Every.

On March 22, 2026, a new Tor-based leak site called "ALP-001" appeared on the dark web This article explores leaks access market. . It openly advertised.

There is an active SEO poisoning campaign that pretends to be more than 25 popular apps in order to spread the AsyncRAT malware This article explores seo.

Discover how Researchers at ReliaQuest have found a new Tor-based data leak site called "ALP-001." The platform recently appeared on the dark web and.

NIST SP 1308, the "Cybersecurity, Enterprise Risk Management, and Workforce Management Quick-Start Guide," was published by the National Institute of.

A complex and long-term cyber espionage campaign has successfully attacked important infrastructure in Libya, such as an oil refinery, a.

Cybercriminals are always coming up with new ways to get people to download dangerous software This article explores hackers using firebase. . Hackers.

Roundcube Webmail, a popular open-source web-based IMAP email client, has released version 1.6.14, which includes important security updates to fix.

Google has released an important security update for the Chrome browser to fix eight serious security holes This article explores security update chrome.

As Apple's market share grows among high-value targets like software engineers, executives, and cryptocurrency investors, threat actors are focusing more.

Mazda Motor Corporation has officially announced a security breach in which someone outside the company gained access to an internal warehouse management.

It's tax season, and cybercriminals are taking advantage of the rush This article explores fatmalloc malware purposely. . Huntress says that a big.

Cybercriminals have set their sights on Android users through a well-crafted phishing scheme that disguises malicious applications as beta-testing.

An enormous attack surface that includes old Microsoft Internet Information Services (IIS) servers This article explores iis daily vulnerable. . On March.

A major supply chain attack is growing in the cybersecurity world. After a recent breach of the GitHub aquasecurity/trivy-action repository, Socket's.