CYBER ATTACK

Comprehensive guidelines on Secure Connectivity Principles for Operational Technology (OT) environments have been jointly released by the National

By taking advantage of GitHub's fork system, attackers were able to take control of the official GitHub Desktop repository and distribute malware

As 2026 approaches, the cybersecurity environment is changing in ways that are actually advantageous to defenders This article explores 2026

The well-known Node.js sandboxing library vm2 has a serious flaw that lets attackers get out of the sandbox and run arbitrary system commands on the

A new Loader-as-a-Service threat called Caminho Loader combines fileless execution, steganography, and cloud abuse to covertly spread malware over

Recent vulnerability scanning data indicates that a critical remote code execution (RCE) vulnerability affecting thousands of SmarterTools

The U.S This article explores lawsuit impact whatsapp. .

The PyPI-distributed version of PLY (Python Lex-Yacc) 3.11 has been found to have a critical vulnerability that permits arbitrary code execution

Western Digital has revealed a serious security flaw in its Windows desktop program, WD Discovery, which could let hackers run arbitrary code on

Malicious Remote Monitoring and Management (RMM) tools are increasingly being distributed by cybercriminals via phony websites that imitate

With the introduction of simplified procedures for creating Single Executable Applications (SEA) and crucial root certificate updates, Node.js

Threat actors can now launch Denial-of-Service (DoS) attacks against susceptible servers thanks to a number of serious security flaws in React

On January 26, 2026, Microsoft released emergency out-of-band security updates to fix CVE-2026-21509, a zero-day security feature bypass

Since 2023, hacking groups with ties to China have made PeckBirdy, a dangerous malware framework, their main weapon This article explores peckbirdy

Coordinated attacks against Indian government organizations have been carried out by advanced persistent threat actors operating out of Pakistan,

React Server Components have been found to have multiple denial of service (DoS) vulnerabilities that impact a number of popular npm packages

Cybercriminals are deceiving users by creating phony websites that imitate well-known programs like Notepad++ and 7-Zip This article explores rmm

Due to an excessive number of low-quality and pointless bug reports, the curl project terminated its bug bounty program in January 2026.

About 800,000 internet-accessible Telnet instances are vulnerable to unauthenticated remote code execution (RCE) due to a critical authentication bypass.

Online security and privacy are more crucial than ever in today's digital world.

Browser attacks are now much more coordinated and dangerous than they were in the past This article explores stanley malware. .

Software developers are the target of a sophisticated supply chain attack by North Korea's Lazarus Group under the "Fake Font" campaign This article explores

To aid in the security of embedded systems utilized in vital infrastructure and defense technologies throughout the United States, a new Embedded Systems

A new wave of targeted attacks against European drone manufacturers and defense contractors has been initiated by Lazarus, a sophisticated hacking group

Instagram's mobile web interface had a server-side authorization flaw that made it possible for totally unauthenticated users to view private account posts

About 800,000 exposed instances of GNU InetUtils telnetd are susceptible to remote code execution attacks, making it a serious security risk.

Two serious authentication bypass vulnerabilities (CVE-2025-34164 and CVE-2025-34165) in NetSupport Manager, a reputable remote access tool used by many

In an unprotected, unencrypted cloud repository, a massive credential database with 149.4 million exposed logins and passwords was found.

Threat actors associated with the Democratic People's Republic of Korea (DPRK) used LNK shortcut files as a weapon to spread MoonPeak malware, a XenoRAT

Threat researchers discovered a concerning espionage operation in December 2025 that used sophisticated phishing campaigns to target Indian citizens This