CYBER ATTACK

One of the most popular Windows file compression programs, WinRAR, has a serious security flaw that has made it a popular tool for hackers looking

According to the project a memory leak in its embedded JavaScript engine has been found This article explores scans zap maintainers.

The Gemini MCP Tool, a tool frequently used to control interactions within the Gemini ecosystem, has a serious zero-day vulnerability.

Learn more Cybersecurity Open-source cyber software In 2026 the banking industry will be under pressure as legal requirements and cyberthreats

A significant memory leak in the JavaScript engine of the popular open-source web application security scanner ZAP (Zed Attack Proxy) has been made

A major data breach impacting about 29.8 million user accounts was revealed by music streaming service SoundCloud in December 2025 This article

The stable channel now has Chrome versions 144.0.7559.109 and 144.0.7559.110, which fix a serious security flaw in the Background Fetch API This

Check Point's Harmony SASE (Secure Access Service Edge) Windows client software has a critical privilege-escalation vulnerability that affects

Fortinet has verified that its FortiCloud SSO feature has a critical authentication bypass vulnerability that is being actively exploited in the

After WorldLeaks, a financially motivated ransomware group, claimed responsibility for a major data breach affecting the company, sportswear giant

A new class-action lawsuit accusing Meta of surreptitiously accessing users' end-to-end encrypted messages has been vehemently rejected by

The implementation of a new security architecture for WhatsApp, intended to fortify the app against advanced cyberthreats, has been formally

The FortiCloud Single Sign-On (SSO) feature has an authentication bypass vulnerability that has been actively exploited in the wild, according to

Cybercriminals are deceiving users by creating phony websites that imitate well-known programs like Notepad++ and 7-Zip This article explores rmm

In order to fix a high-severity security vulnerability impacting the Background Fetch API, Google has formally released a stable channel update for

a series of serious flaws in Cal.com, an open-source scheduling system used by businesses and developers all over the world This article explores

Thirty-one people have been charged by a federal grand jury in Nebraska for using Ploutus malware to steal millions of dollars from ATMs around the

Chinese national Jingliang Su was sentenced to 46 months in prison by a U.S This article explores money laundering strategies. .

The deadline for Exchange Online's SMTP AUTH basic authentication deprecation has been extended by Microsoft This article explores authentication

Jingliang Su, a Chinese national, was given a 46-month prison sentence for his role in a significant cryptocurrency fraud scheme that targeted

Because of their heavy reliance on digital services for travel, taxes, packages, and traffic fines, Canadian citizens are increasingly at risk from

The TP-Link Archer MR600 a well-known 4G+ Cat6 AC1200 Wireless Dual Band Gigabit Router has been identified as a command injection issue.

A major security incident involving the unapproved disclosure of user data has affected SoundCloud, a central audio streaming platform This article

A recently identified campaign uses a combination of social engineering and genuine Windows components to deliver information-stealing malware in a

Local attackers can obtain system-level privileges due to a significant vulnerability in Check Point's Harmony SASE Windows client This article

Strict Account Settings is a lockdown-style security feature that WhatsApp has implemented to shield users from extremely sophisticated

Microsoft's Application Virtualization (App-V) script, SyncAppvPublishingServer.vbs, is used as a living-off-the-land binary (LOLBIN) in a

The HoneyThe Myte APT group, also referred to as Mustang Panda, has added sophisticated surveillance tools and browser login stealers to its

The HoneyGovernment organizations throughout Asia and Europe are still at serious risk from the Myte threat group, also referred to as Mustang

Following confirmation of the active exploitation of a zero-day authentication bypass vulnerability in several products, Fortinet temporarily