CYBER ATTACK

Using a powerful malware strain called BADIIS, a sophisticated cyber campaign has compromised more than 1,800 Windows servers worldwide. Targeting.

30 phony Chrome extensions masquerading as productivity tools are being used by cybercriminals to take advantage of the growing popularity of AI.

One of the most dependable vulnerabilities on the internet is still weak SSH passwords. Botnet operators take full advantage of them, transforming Linux.

As a Ransomware-as-a-Service (RaaS) provider that poses as a cartel to recruit affiliates and grow its business, DragonForce became a major ransomware.

Next-Mdx-Remote Vulnerability Learn more Tools for endpoint detection and response Taking advantage of ethical hacking tools A security warning A serious.

Using BADIIS malware to carry out a massive SEO poisoning campaign, the Chinese-speaking group REF4033, also known as UAT-8099, has compromised over 1,800.

Arogue virtual machines (VMs) were a key component of the cybercrime group Muddled Libra's (also known as Scattered Spider or UNC3944) attack on VMware.

BeyondTrust has issued urgent security updates for a critical remote code execution (RCE) vulnerability plaguing its Remote Support (RS) and Privileged.

A critical flaw in the popular Notepad++ text editor has been added to the U.S This article explores vulnerability wingup updater. . Cybersecurity and.

Zimbra has released version 10.1.16, a crucial security update that fixes several high-severity flaws in its collaboration suite that could leave user.

Over 800,000 WordPress websites are vulnerable to unauthenticated remote code execution due to a serious flaw in the WPvivid Backup plugin This article.

When processing untrusted input, servers are vulnerable to arbitrary code execution due to a critical flaw in next-mdx-remote, a popular TypeScript.

Notepad++ Code Execution Vulnerability CISA has identified active exploitation of a critical code execution flaw in Notepad++, a popular open-source text.

A critical SQL injection vulnerability in Microsoft Configuration Manager has been added to the U.S This article explores vulnerability microsoft.

Discover how A malicious NPM package named "duer-js" was released by user "luizaearlyx." This package installs "Bada Stealer," a sophisticated infostealer.

Discover how Since its inception in December 2023, DragonForce has become a powerful force in the realm of cybercrime. Using a sophisticated.

In just four seconds, a highly advanced self-spreading worm can use SSH brute-force attacks to fully compromise Linux systems. This new threat creates a.

An unauthenticated attacker may be able to upload files and execute code on the server due to a serious vulnerability in the WPvivid Backup & Migration.

Thousands of developers and Windows users are at risk due to a malicious malware campaign that has surfaced on the NPM package registry This article.

Investigators in a September 2025 incident response case discovered a malicious virtual machine within a VMware vSphere environment and conclusively.

Recently, a significant security breach involving Feiniu (fnOS) Network Attached Storage devices has surfaced This article explores devices botnet army.

Security researcher NEWO-J has revealed "EvilMouse," a fully functional USB mouse that also functions as a secret keystroke injector, in a glaring example.

Through a malevolent operation known as "graphalgo," the North Korean state-sponsored hacker collective Lazarus Group has initiated a sophisticated phony.

Recently, Hewlett Packard Enterprise (HPE) revealed serious defects in its Aruba Networking Private 5G Core software. These vulnerabilities enable.

Gemini AI Model Cyberattacks To circumvent conventional detection techniques, threat actors have started using Google's Gemini API to dynamically generate.

After a significant disruption to law enforcement in 2025, the infamous malware that steals information, LummaStealer, has made a big comeback This.

Adblock Filters Make a User's Location Public Many internet users think that using a VPN makes them totally anonymous when using the internet This article.

Promptware Google Calendar Can Be Used as a Weapon by Hackers Promptware is a brand-new, dangerous kind of cyberattack that can transform your personal AI.

Stolen Credentials for the Microsoft Outlook Add-in The first known example of a malicious Microsoft Outlook add-in being used against users in real-world.

The North Korean hacker collective Lazarus has started a new malware campaign This article explores malware campaign graphalgo. . The "Graphalgo" attack.