CYBER ATTACK

By enabling malicious image files to initiate code execution during standard metadata processing, a serious security vulnerability in ExifTool is.

AI-powered Penetration Testing with Kali Linux The Kali Linux team has released a new version of their expanding LLM-driven security series, which.

A high-severity vulnerability that could enable a local authenticated attacker to increase their privileges on impacted systems has been fixed by Ivanti's.

A sophisticated iPhone exploit toolkit called "Coruna" is at the center of an escalating controversy after new research revealed that it most likely came.

Russian Spies Used an iPhone Exploit Toolkit Russian spies and Chinese cybercriminals have gained access to a potent iPhone exploit kit called "Coruna,".

Hackers Target Microsoft Teams After persuading staff members to grant remote access, the attackers are now using a recently discovered malware family.

A rogue npm package that poses as a reliable developer tool has surfaced as part of a dangerous malware campaign that targets software developers This.

A high-severity stack-based buffer overflow vulnerability in Fortinet's FortiManager platform has been made public This article explores vulnerability.

Researchers have discovered a new malware campaign that propagates the stealer BoryptGrab by using phony GitHub repositories This article explores malware.

A phony CleanMyMac website is being used by a new macOS malware campaign to trick users into infecting their own computers This article explores.

Cloudflare has fixed several Pingora vulnerabilities that could allow attackers to smuggle HTTP requests through poison caches and edge proxies, creating.

Vulnerabilities in Cloudflare Pingora In order to address three serious vulnerabilities, Cloudflare has released version 0.8.0 of its open-source Pingora.

Following its addition to the Known Exploited Vulnerabilities (KEV) catalog by the Cybersecurity and Infrastructure Security Agency (CISA) on March 9.

Discover how One day after fresh hostilities broke out in the Middle East on March 1, 2026, Camaro Dragon, an advanced persistent threat group with ties.

Apache ZooKeeper Vulnerability: Two "Important" severity vulnerabilities have been found in Apache ZooKeeper, a popular service for naming and.

Since early February 2026, the Iranian advanced persistent threat group known as Seedworm—also known as MuddyWater, Temp Zagros, and Static Kitten—has.

Through a network of phony GitHub repositories, a new data-stealing malware known as BoryptGrab has been covertly propagating throughout Windows systems.

Large-scale fraudulent account registration campaigns that target service providers and online platforms globally have been connected to a vast cybercrime.

Discover how An ongoing wave of targeted phishing campaigns that have successfully taken over the accounts of prominent users, including government.

Copilot Cowork, a new AI-powered feature integrated into Microsoft 365 that goes beyond conversational support to autonomous task execution, was unveiled.

Organizations and individuals are now seriously threatened by a sophisticated credential-stealing campaign based on a tool known as VIP Keylogger This.

M365Pwned, two WinForms GUI tools created to enumerate, search, and exfiltrate data from Microsoft 365 environments using application-level OAuth tokens.

Threat actor APT36, also known as Transparent Tribe, is based in Pakistan and has switched from using well-crafted tools to a new strategy known as.

Hikvision Vulnerability of Multiple Products On March 5, 2026, a serious vulnerability impacting several Hikvision products was added to the Known.

Vulnerabilities in the Nginx UI Full system backups can be downloaded and decrypted by unauthorized attackers thanks to a recently identified critical.

Malicious Images Cause Code Execution on macOS Due to an ExifTool Flaw The long-held notion that macOS systems are intrinsically resistant to malware is.

In X11-based desktop environments, a recently identified Linux malware called ClipXDaemon has become a direct financial threat to cryptocurrency users.

Since at least 2020, a Chinese-affiliated cyber-espionage group known as CL-UNK-1068 has been secretly attacking vital infrastructure throughout South.

Two high-impact vulnerabilities that could result in the exposure of sensitive data and possible server impersonation attacks have been addressed by.

The open-source identity and access management (IAM) platform ZITADEL, which is frequently utilized by businesses for safe authentication procedures, has.