CYBER ATTACK

Discover how A new cybersecurity threat has come from the npm ecosystem, where hackers were able to hide a complex information stealer inside packages.

Loblaw Companies Limited, one of Canada's biggest stores, has revealed a data breach after noticing strange activity on part of its internal IT network.

Discover how Critical LangSmith Vulnerability Account Takeover Researchers at Miggo Security have found a serious flaw (CVE-2026-25750) in LangSmith, a.

Veeam Fixes Security Holes on Backup Server Backup & Replication software has received an important security update that fixes serious flaws that could.

Salesforce Warns ShinyHunters: There is a serious threat campaign going on right now that is going after Experience Cloud sites that are not set up.

Many Linux distributions installed the GSSAPI Key Exchange patch on top of their OpenSSH packages, which had a major security hole This article explores.

Metasploit Pro 5.0.0 is out now This article explores metasploit pro centralized. . As hackers keep using new weaknesses to attack, the need for ongoing.

Nine serious security holes have been found in AppArmor, which is a widely used mandatory access control framework for Linux This article explores kernel.

Google has put out an emergency security update for its Chrome browser after confirming that two high-severity zero-day vulnerabilities are being used in.

Discover how The conflict around Iran is now shaping cyber espionage across the region. Since the start of the war in late February 2026, security.

Recently, Huntress's cybersecurity researchers saw threat actors using INC ransomware after a complicated process of stealing data This article explores.

Handala, an Iranian-linked threat group, is behind a growing number of destructive wiper attacks that are threatening businesses in the US and Israel This.

A coordinated international law enforcement operation has taken down SocksEscort, a large malicious proxy service that cybercriminals used to hide their.

Discover how Security researchers have found six bad Composer packages on Packagist that claim to be real OphimCMS themes. OphimCMS is a Laravel-based.

A newly discovered vulnerability in OpenSSH is putting several Linux distributions at risk, allowing attackers to crash SSH processes with a single.

Meta adds new tools to WhatsApp, Facebook, and Messenger to fight scams This article explores chats suspicious meta. . To fight the growing.

Ericsson Inc., the US branch of Swedish telecommunications giant Ericsson, has revealed a data breach that put private financial and personal information.

If someone with physical access to an Android device has the MediaTek Dimensity 7300 chipset, they could get the phone's lock PIN, decrypt stored data.

Cybersecurity experts have seen a huge rise in phishing campaigns that use artificial intelligence to get around regular email security filters This.

AI assistants have quickly changed the way things are done every day, making it easier for teams to handle overflowing inboxes, client communications, and.

The MediaTek Dimensity 7300 chipset has a serious security hole that lets a physical attacker get device PINs, decrypt on-device storage, and steal.

Splunk RCE Vulnerability A serious security advisory has been sent out to let users know about a high-severity flaw that affects both Enterprise and Cloud.

Vulnerability in Paloalto Cortex XDR Broker A security warning has been sent out about a new flaw that affects the Cortex XDR Broker Virtual Machine (VM).

Threat actors are using legitimate Remote Monitoring and Management (RMM) tools more and more to get into corporate networks and stay there for a long.

The Ericsson Data Breach A Swedish telecommunications multinational's U.S. subsidiary has revealed a data breach that put the personal information of.

cisco-ios-xr-software-vulnerability Cisco has sent out a high-severity security advisory to warn businesses about two serious privilege-escalation flaws.

Discover how The BeatBanker malware campaign has been found recently. It uses a unique method to stay on Android devices. This malware mostly affects.

The SolarWinds Web Help Desk has a problem with deserialization This article explores solarwinds vulnerability ajaxproxy. . Cybersecurity experts have.

Discover how Iranian state-sponsored hackers are becoming more involved in the criminal world, making their connections with underground cybercrime groups.

A complex Microsoft 365 credential harvesting campaign that uses Cloudflare's own security features to avoid detection and steal user login information.