CYBER ATTACK

A fraudulent campaign that uses a fake version of the popular 7-Zip file archiving program to covertly turn home computers into residential proxy nodes.

Attackers can execute commands remotely and circumvent two-factor authentication thanks to a serious vulnerability in Gogs, a lightweight self-hosted Git.

In December 2025, TeamPCP—also referred to as PCPcat, ShellForce, and DeadCatx3—emerged as a highly skilled cloud-native threat actor that targeted.

The unexpected emergence of "React2Shell" (CVE-2025-55182), a serious flaw affecting Next.js and React Server Components, has had an effect on the.

Indian defense and government agencies have been functioning under a persistent digital shadow for over ten years This article explores ongoing defenses.

Vulnerability in Windows Error Reporting It was found that there is a serious security vulnerability in Windows Error Reporting Service that enables.

A worrying example of AI-assisted threat development is the complex Linux malware framework VoidLink, which combines kernel-level stealth mechanisms with.

Socelars, a cunning Trojan that steals information from Windows users, is being monitored by security researchers This article explores malware trends.

Discover Quantum Vulnerable Cryptography with a Crypto Scanner Tool A new open-source tool has surfaced to assist developers in protecting their data from.

The Phorpiex botnet, an established malware-as-a-service platform that has been operational for more than ten years, is making a comeback in the realm of.

Researchers studying cybersecurity have discovered a massive Phorpiex campaign that is affecting email accounts all over the world This article explores.

Since 2019, GuLoader malware has been a major downloader of RATs and stealers, continuing to afflict systems. Its extensive use of shape-shifting code and.

Fancy Bear, a group of hackers with ties to Russia, has launched Operation Neusploit, a cunning cyberattack This article explores vulnerability microsoft.

Bloody Wolf hackers, who use custom Java loaders to target the manufacturing, finance, and IT sectors, have launched spear-phishing attacks against.

A Vulnerability in libpng Exposes Millions of Apps A serious flaw has been discovered in libpng, the official PNG reference library that is utilized by.

Leak in the WormGPT Database The entire WormGPT database, a well-known artificial intelligence platform with a focus on cybercrime that has been offered.

Flag for Teams' Malicious Messages By enabling Defender for Office 365 Plan 1 users to directly report suspicious messages, Microsoft is greatly enhancing.

Since its inception, GuLoader, also referred to as CloudEyE, has cemented its status as a recurring threat in the cybersecurity environment. It is.

Due to a significant security breach, more than 15,200 OpenClaw AI control panels are now publicly accessible online, giving hackers complete remote.

Legitimate business emails are being mistakenly classified as phishing attempts due to a significant bug affecting Microsoft Exchange Online This article.

Beginning February 4, 2026, Ivanti Endpoint Manager Mobile (EPMM) systems were the target of a cunning cyberattack This article explores jsp safety. . Two.

Global talent has benefited from remote work, but there are risks involved as well This article explores suspicious hires linkedin. . On LinkedIn, North.

A sophisticated wave of targeted attacks against organizations throughout Russia and Uzbekistan has been launched by the cybercriminal group Stan Ghouls.

Augustus LLM Vulnerability Scanner Augustus is a brand-new, open-source vulnerability scanner made to protect Large Language Models (LLMs) from a.

The well-known smartphone app "Chat & Ask AI" made a serious privacy mistake by disclosing 300 million private messages from 25 million users. This app.

APT36, a cyber espionage group with ties to Pakistan, Transparent Tribe, has increased the scope of its attacks to include cybersecurity companies and.

Attackers were discovered on virtual machines (VMs) with hostnames derived from ISPsystems, such as WIN-J9D866ESIJ2 and WIN-LIVFRVQFMKO, by SophosLabs'.

By simply sending a Google Calendar invite, an attacker can take control of computers thanks to a startling zero-click vulnerability in Claude Desktop.

Recently, the Advanced Persistent Threat (APT) group UNC3886 launched a highly advanced cyber espionage campaign against Singapore's telecommunications.

FvncBot, a new malware variant, has been found to target Android users, particularly Polish mobile banking customers This article explores fvncbot new.