CYBER ATTACK

Microsoft's Application Virtualization (App-V) script, SyncAppvPublishingServer.vbs, is used as a living-off-the-land binary (LOLBIN) in a

The HoneyThe Myte APT group, also referred to as Mustang Panda, has added sophisticated surveillance tools and browser login stealers to its

The HoneyGovernment organizations throughout Asia and Europe are still at serious risk from the Myte threat group, also referred to as Mustang

Following confirmation of the active exploitation of a zero-day authentication bypass vulnerability in several products, Fortinet temporarily

On January 27, 2026, OpenSSL fixed 12 vulnerabilities, one of which was a high-severity flaw that could cause remote code execution This article

Researchers have discovered a serious security risk that uses dishonest browser extensions to target ChatGPT users.

A critical WinRAR vulnerability known as CVE-2025-8088 is being actively exploited by several threat actors to obtain and retain access to Windows

a major security alert that addresses several flaws in various iterations of its cryptographic library This article explores vulnerability openssl

One of the most popular Windows file compression programs, WinRAR, has a serious security flaw that has made it a popular tool for hackers looking

VM2 has been found to have a critical sandbox escape vulnerability This article explores vulnerability vm2 sandbox. .

16 malicious Chrome browser extensions that pose as ChatGPT productivity enhancers were part of a coordinated campaign.

In order to increase productivity, creativity, and AI-driven interactions, Meta is preparing to launch premium subscription tiers for its flagship

Security researchers found a risky npm package called ansi-universal-ui on January 23, 2026, which posed as a genuine user interface component

An advanced watering hole attack that targets users of EmEditor, a widely used Windows text editor that is preferred by developers, particularly in

Threat actors are using Microsoft Teams' legitimate features to spread malicious content that looks to be from reliable Microsoft services in a

Threat actors are using Microsoft Teams' legitimate features to spread malicious content that looks to be from reliable Microsoft services in a

The ability of Security Operations Centers to react promptly and precisely to alerts is crucial to their survival.

Currently, over 100 high-value companies in various industries are the target of a significant identity-theft operation.

Through a critical vulnerability tracked as CVE-2025-55182, also known as React2Shell, threat actors have begun to target businesses in the

In a recent class-action lawsuit, Meta Platforms is accused of deceiving billions of WhatsApp users into believing that their messages are

With more than 180 AI agent security rules and 74 specialized scanners, MEDUSA is an AI-first Static Application Security Testing (SAST) tool.

A dishonest tactic has been used by cybercriminals to compromise users looking for popular software programs online This article explores programs

Active remote code execution (RCE) attacks could target more than 6,000 SmarterMail servers that are open to the public This article explores

Western Digital's WD Discovery desktop program has been found to have a significant security flaw that could let hackers run arbitrary code on

Comprehensive guidelines on Secure Connectivity Principles for Operational Technology (OT) environments have been jointly released by the National

By taking advantage of GitHub's fork system, attackers were able to take control of the official GitHub Desktop repository and distribute malware

As 2026 approaches, the cybersecurity environment is changing in ways that are actually advantageous to defenders This article explores 2026

The well-known Node.js sandboxing library vm2 has a serious flaw that lets attackers get out of the sandbox and run arbitrary system commands on the

A new Loader-as-a-Service threat called Caminho Loader combines fileless execution, steganography, and cloud abuse to covertly spread malware over

Recent vulnerability scanning data indicates that a critical remote code execution (RCE) vulnerability affecting thousands of SmarterTools