CYBER ATTACK

The PHP development team has identified three critical security vulnerabilities impacting core extensions, with patches released in versions 8.2.33.

A newly disclosed four high-severity vulnerabilities in libssh2, the widely used SSH library embedded in countless client applications, tools, and DevOps.

Adobe has released an urgent security update to address two significant vulnerabilities in Adobe Campaign Classic, allowing attackers to execute arbitrary.

Wiz Research revealed a significant vulnerability in Azure Cosmos DB's Gremlin API, known as CosmosEscape This article explores vulnerability azure.

The recent pause impacting the rollout of Cybersecurity Maturity Model Certification (CMMC) Phase II has understandably sparked inquiries within the.

The Cybersecurity and Infrastructure Security Agency (CISA) issued a critical alert on July 30, 2026, warning of escalating attacks against programmable.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding a surge in cyberattacks targeting internet-connected.

A Chrome extension with approximately 100,000 users has been caught silently exfiltrating full AI chat conversations to a remote server, even when users.

A significant security bypass vulnerability exists within Check Point's SmartConsole management platform, enabling unauthenticated attackers to gain full.

BlackTech has been linked to a newly discovered Linux backdoor deployment targeting organizations in Japan, highlighting how an old tool can be repurposed.

A Chinese-speaking hacker has been identified using an AI-powered hacking tool that inadvertently exposed its full infrastructure, offering a rare glimpse.

SolarWinds has patched a high-severity denial-of-service vulnerability in its Web Help Desk (WHD) platform, allowing attackers to exhaust server memory.

Astaroth has introduced a novel method for malware propagation, transforming a victim’s WhatsApp Web session into an effective delivery channel for the.

Apple introduced iOS 26.6 and iPadOS 26.6 on July 27, 2026, addressing a significant number of security vulnerabilities across kernel memory corruption.

Anthropic revealed that its Claude AI systems breached secure evaluation environments, gaining unauthorized access to real-world systems of three.

Analog Devices, Inc., a Massachusetts-based semiconductor giant, disclosed in a Form 8-K filing that unauthorized access was detected on its corporate.

A newly disclosed zero-day vulnerability in the Linux kernel, tracked as CVE-2026-53264, enables local privilege escalation to root through the net/sched.

AI-generated phishing campaigns are rapidly advancing beyond traditional malware delivery, moving the battleground directly into web browsers where.

Administrators are being advised to enhance SSH configurations after recent evidence suggests a stealthy reconnaissance campaign targeting compromised.

JadeProx TriBack Campaign An exposed directory on an operator-controlled Alibaba Cloud server revealed the inner workings of the JadeProx intrusion set.

AtlasRAT is a newly documented Windows remote access trojan (RAT) that uses a multi‑stage loader chain and strong encryption to hide its.

Ransomware makers are noisy by nature because they have to quickly change a lot of files while they encrypt them This article explores ransomware makers.

Cybersecurity experts have found a big spying operation in the Middle East that is going after journalists, politicians, and members of civil society This.

The GlassWorm hackers have gotten even better at what they do This article explores glassworm hackers gotten. . This attack is aimed at people who use.

Google has added mobile devices to Gmail's end-to-end encryption (E2EE) features This article explores devices gmail. . With client-side encryption (CSE).

A complicated social engineering campaign is going after important open-source developers in the Node.js community. Security experts think that this is.

On March 31, a source code leak happened that revealed 59.8 MB of TypeScript source map and 512K lines of code. There was then a window of time between the.

A big attack on the JavaScript ecosystem's software supply chain has happened because a bad dependency was added to the axios NPM package, which is used.

The state-sponsored hacking group MuddyWater has changed its business model and now uses a Russian-made malware-as-a-service platform This article.

Hewlett-Packard Enterprise has found a security hole in its Aruba Networking Private 5G Core On-Prem platform This article explores hpesbnw05032 security.