CYBER ATTACK

Malicious Bing search ads have been used in a recent tech support scam campaign to trick American users into visiting phony Microsoft Azure support pages.

With great urgency, Microsoft released its February 2026 Patch Tuesday, which addressed 54 security vulnerabilities in Windows, Office, Exchange, Azure.

Threat actors with ties to North Korea are constantly improving their strategy against targets in the cryptocurrency and decentralized finance (DeFi).

A robust Linux command-and-control (C2) framework called VoidLink creates implant binaries for enterprise and cloud attacks. The implant, known as.

Threat Hunting Is Essential for SOC Sandbox-derived threat intelligence is becoming more and more popular among high-performing SOC teams as a way to make.

Vulnerability in FortiOS Authentication Bypass A high-severity authentication bypass vulnerability in FortiOS, identified by Fortinet as CVE-2026-22153.

Discover how Microsoft 365 Admin Center Outage According to the company's service health dashboard, Microsoft 365 administrators in North America are.

DDoS defense strategies Hyper-connectivity and, regrettably, hyper-volumetric cyber threats characterize the digital environment of 2026 This article.

Threat actors released malicious versions of dYdX client packages to npm and PyPI ecosystems as part of a supply chain attack, according to cybersecurity.

SAP Security Patch Day Fixes for SAP CRM and SAP S/4HANA SAP's February 2026 Security Patch Day brought fixes that SAP encourages users to prioritize in.

Prometei, a Russian-affiliated botnet that has been active since 2016, was discovered by eSentire's Threat Response Unit (TRU) attacking a Windows server.

Multiple vulnerabilities in Ivanti Endpoint Manager For its Endpoint Manager (EPM) platform, Ivanti has published important security updates that fix two.

A fraudulent campaign that uses a fake version of the popular 7-Zip file archiving program to covertly turn home computers into residential proxy nodes.

Attackers can execute commands remotely and circumvent two-factor authentication thanks to a serious vulnerability in Gogs, a lightweight self-hosted Git.

In December 2025, TeamPCP—also referred to as PCPcat, ShellForce, and DeadCatx3—emerged as a highly skilled cloud-native threat actor that targeted.

The unexpected emergence of "React2Shell" (CVE-2025-55182), a serious flaw affecting Next.js and React Server Components, has had an effect on the.

Indian defense and government agencies have been functioning under a persistent digital shadow for over ten years This article explores ongoing defenses.

Vulnerability in Windows Error Reporting It was found that there is a serious security vulnerability in Windows Error Reporting Service that enables.

A worrying example of AI-assisted threat development is the complex Linux malware framework VoidLink, which combines kernel-level stealth mechanisms with.

Socelars, a cunning Trojan that steals information from Windows users, is being monitored by security researchers This article explores malware trends.

Discover Quantum Vulnerable Cryptography with a Crypto Scanner Tool A new open-source tool has surfaced to assist developers in protecting their data from.

The Phorpiex botnet, an established malware-as-a-service platform that has been operational for more than ten years, is making a comeback in the realm of.

Researchers studying cybersecurity have discovered a massive Phorpiex campaign that is affecting email accounts all over the world This article explores.

Since 2019, GuLoader malware has been a major downloader of RATs and stealers, continuing to afflict systems. Its extensive use of shape-shifting code and.

Fancy Bear, a group of hackers with ties to Russia, has launched Operation Neusploit, a cunning cyberattack This article explores vulnerability microsoft.

Bloody Wolf hackers, who use custom Java loaders to target the manufacturing, finance, and IT sectors, have launched spear-phishing attacks against.

A Vulnerability in libpng Exposes Millions of Apps A serious flaw has been discovered in libpng, the official PNG reference library that is utilized by.

Leak in the WormGPT Database The entire WormGPT database, a well-known artificial intelligence platform with a focus on cybercrime that has been offered.

Flag for Teams' Malicious Messages By enabling Defender for Office 365 Plan 1 users to directly report suspicious messages, Microsoft is greatly enhancing.

Since its inception, GuLoader, also referred to as CloudEyE, has cemented its status as a recurring threat in the cybersecurity environment. It is.