CYBER ATTACK

Discover how The "Remote Control" feature in Anthropic's most recent Claude Code update allows developers to control local terminal sessions from web.

A highly sophisticated phishing campaign that poses as the cybersecurity company Avast has recently surfaced This article explores mimics real avast.

Due to the growing availability of highly advanced malicious tools, the mobile threat landscape is undergoing a dramatic shift toward professionalized.

Through a tactic known as OAuth consent abuse, Microsoft Entra ID is increasingly becoming a target for threat actors who are constantly searching for new.

Review of SOC analysts' alerts When an alert proves to be harmless, how much time do you spend reviewing it This article explores investigating single.

CISA Verifies FileZen Vulnerability Exploit Threat actors are actively taking advantage of a serious flaw in FileZen by Soliton Systems K.K., according to.

Vulnerabilities in SolarWinds Serv-U The Serv-U file server software has received an urgent security update to address several serious flaws that could.

Microsoft Expands Support for DLP Data Loss Prevention (DLP) controls for Copilot Purview are being extended to prevent Microsoft 365 Copilot from.

Threat actors have actively exploited a critical vulnerability in Apache ActiveMQ, resulting in the full deployment of the LockBit ransomware throughout.

SURXRAT is a sophisticated Android Remote Access Trojan (RAT) that is marketed via a malware-as-a-service (MaaS) business model This article explores.

On February 24, 2026, SolarWinds released Serv-U version 15.5.4, which fixes four serious flaws that could give hackers root access to compromised systems.

CPSD CryptoPro Secure Disk for BitLocker Vulnerabilities Numerous flaws have been found in the popular encryption program CryptoPro Secure Disk (CPSD) for.

Software developers are being actively targeted by a coordinated attack campaign using malicious repositories that pose as authentic Next.js projects and.

Microsoft Ends Support for Windows Server 2016 and Windows 10 2016 Three Windows releases that were first released in 2016 are approaching end-of-support.

Discover how Updates from Microsoft Windows 11 25H2 and 24H2 For Windows 11 versions 25H2 and 24H2, KB5077241, an optional non-security update, has been.

OAuth-based application attacks are becoming more common, according to Red Canary's Threat Research team This article explores risk oauth attacks. . One.

A serious flaw in Soliton Systems' FileZen software has been added to the U.S This article explores risks filezen secure. . Cybersecurity and.

Threat actors recently gained initial access to an organization's network by taking advantage of a vulnerability (CVE-2023-46604) in an Apache ActiveMQ.

Discover how The landscape of malware-as-a-service (MaaS) keeps pushing the limits of cybercrime. Researchers at Cyberthint have examined a new mobile.

A shadowy network of exploit brokers trafficking stolen U.S. government cyber tools has been the target of a significant crackdown by the US Department of.

On February 24, 2026, the Office of Foreign Assets Control (OFAC) of the U.S This article explores publicly operation zero. . Department of Treasury.

TrendAITM has discovered a troubling change in the distribution of the Atomic Stealer (AMOS) malware in recent cybersecurity research This article.

A sophisticated supply chain attack that targets ASP.NET developers was recently discovered by Socket's Threat Research Team This article explores.

Copilot on GitHub Was Exploited RoguePilot, a serious AI-driven flaw in GitHub Codespaces, allowed hackers to covertly take over a repository by inserting.

Threat actors transformed popular artificial intelligence tools into weapons in 2025 so they could launch quick, accurate network intrusions This article.

Cybercriminals continue to target the financial sector because it protects not only enormous sums of money but also sensitive personal information.

Four malicious NuGet packages designed to steal login credentials and create persistent backdoors inside web applications have been identified as part of.

Discover how Reddit was fined £14.47 million. Reddit, Inc. was fined £14.47 million ($19.52 million) by the UK's Information Commissioner's Office (ICO).

Ruby Deserialization Vulnerability A Ruby background job processing system has been found to have a critical Remote Code Execution (RCE) vulnerability.

Discover how The popular data-theft malware Atomic macOS Stealer (AMOS) has drastically changed how it targets its victims. Threat actors now embed it in.