CYBER ATTACK

In the world of cybersecurity, the Interlock ransomware group has become a serious threat especially

In SOCs, false negatives are increasingly the most costly "quiet" failure This article explores false negatives increasingly.

The foundation of authentication in Windows environments is Active Directory (AD) which houses domain configurations

In order to disable endpoint detection response (EDR) systems during intrusions

The creators of DragonForcea ransomware-as-a-service group that first came to light in 2023seem to be taking a cue from organized crime

Image Retrieval in Teams Chats Millions of business users worldwide now have normal functionality after Microsoft fixed an issue affecting inline

The majority of internet users rely on their routers to properly route traffic never realizing that the web's very signposts could be manipulated.

A newly disclosed security flaw in Rancher Manager, tracked as CVE-2025-67601, could expose administrator login credentials during Rancher CLI login

Several authenticated command injection vulnerabilities affecting TP-Link's well-known Archer BE230 Wi-Fi 7 router (v1.2) have been addressed in a

A new alert regarding an actively exploited Server-Side Request Forgery (SSRF) vulnerability in GitLab Community and Enterprise Editions has been

A phony LINE installer that propagates the ValleyRAT malware, which uses sophisticated evasion techniques to target users who speak Chinese This

The cloud and container security community is concerned about a new high-severity vulnerability in the Kubernetes ingress-nginx controller This

Citrix ADC (NetScaler) Gateway infrastructure has been the target of a coordinated worldwide reconnaissance campaign This article explores

A critical remote code execution (RCE) vulnerability in SolarWinds Web Help Desk (WHD) has been added to the Known Exploited Vulnerabilities (KEV)

On February 3 2026, Google released a new Stable Channel update for Chrome (version 144.0.7559.132/.133), fixing two serious security holes that

The Open VSX Registry was the target of a supply chain attack on January 30 2026 This article explores extension used malware.

A serious remote code execution flaw in React Native's Metro development server is being actively used threat actors

These days, trusted cloud platforms like Microsoft Azure, Google Firebase, AWS, and Cloudflare are used threat actors

Emergency security patches for six serious flaws affecting several versions of the well-known Python web framework have been released by the Django

Chrome's Random Code Vulnerabilities In order to fix two high-severity vulnerabilities that could expose users arbitrary code execution (ACE)

A vulnerability in the React server was exploited This article explores vulnerability react server.

When things get noisy, adding more people is a reassuring illusion in cybersecurity leadership.

Threat actors are actively delivering sophisticated malware payloads on Windows Linux systems

Foxit PDF Editor Cloud security updates fix serious cross-site scripting (XSS) flaws that could let hackers run any JavaScript code in users'

Advanced malware is being distributed via phony compliance emails in a sophisticated phishing campaign that targets macOS users This article

Cybercriminals are starting a risky phishing campaign that poses as Dropbox in order to trick users into divulging their login information This

A new version of the PDFly malware has surfaced that uses sophisticated techniques that put conventional analysis methods the test.

NTLM (New Technology LAN Manager), a legacy authentication protocol that has been a part of Windows for more than thirty years, is being phased out

Even the most experienced analysts start to lose focus when hundreds of alerts are vying for their attention at once This article explores burnout

With the introduction of extensive AI controls in Firefox 148, users now have more control over the browser's built-in AI features This article