CYBERSECURITY

Industrial Controllers Still Vulnerable As Conflicts Move to Cyber

Industrial Controllers Still Vulnerable As Conflicts Move to Cyber

Discover how U.S. government is alerting energy firms, water providers, and manufacturing businesses about an increasing threat from state-backed hackers.

CPUID Breach Sends STX RAT Through Trojanized Downloads of CPU-Z and HWMonitor

CPUID Breach Sends STX RAT Through Trojanized Downloads of CPU-Z and HWMonitor

Hackers took advantage of a flaw in CPUID This article explores compromise malware complex. . More than 150 people have been identified as victims, most.

Adobe Patches Exploited CVE-2026-34621, a Flaw in Acrobat Reader

Adobe Patches Exploited CVE-2026-34621, a Flaw in Acrobat Reader

Adobe has released urgent updates to fix a serious security hole in Acrobat Reader This article explores acrobat reader cve. . The CVE-XXXXXX.

Russia's 'Fancy Bear' APT Continues Its Global Onslaught

Russia's 'Fancy Bear' APT Continues Its Global Onslaught

Trend Micro put out two reports about a group of threats called Pawn Storm This article explores pawn storm security. . The security company said on March.

Hims Breach Exposes the Most Sensitive Kinds of PHI

Hims Breach Exposes the Most Sensitive Kinds of PHI

Hims & Hers Health, also known as Hims, had a security problem with its third-party customer support system This article explores leaked hims data. . This.

Google Rolls Out DBSC in Chrome 146 to Block Session Theft on Windows

Google Rolls Out DBSC in Chrome 146 to Block Session Theft on Windows

All Windows users of Google's Chrome web browser can now use Device Bound Session Credentials (DBSC) This article explores session cookies attackers.

GlassWorm Campaign Uses Zig Dropper to Infect Multiple Developer IDEs

GlassWorm Campaign Uses Zig Dropper to Infect Multiple Developer IDEs

Researchers have found a new version of the GlassWorm campaign This article explores glassw worm used. . It has a new Zig dropper that is meant to get.

FINRA Launches Financial Intelligence Fusion Center to Combat Cybersecurity and Fraud Threats

FINRA Launches Financial Intelligence Fusion Center to Combat Cybersecurity and Fraud Threats

The Financial Intelligence Fusion Center will help member firms, their customers, and the securities industry share information quickly This article.

Do Ceasefires Slow Cyberattacks? History Suggests Not

Do Ceasefires Slow Cyberattacks? History Suggests Not

Handala, Iran's most well-known false-flag hacktivist group, said it would join a temporary ceasefire This article explores threats worse ceasefires.

Browser Extensions Are the New AI Consumption Channel That No One Is Talking About

Browser Extensions Are the New AI Consumption Channel That No One Is Talking About

Discover how AI browser add-ons don't follow DLP rules and aren't recorded in SaaS systems. They run directly in browsers and can see everything a user.

Compromised Nextend servers sent out the Backdoored Smart Slider 3 Pro Update.

Compromised Nextend servers sent out the Backdoored Smart Slider 3 Pro Update.

Unknown cyber threats took advantage of the update system for the Smart Slider 3 Pro plugin in WordPress and Joomla This article explores plugin involved.

Shadow AI in Healthcare Is Here to Stay

Shadow AI in Healthcare Is Here to Stay

Healthcare workers use AI apps and chatbots that haven't been approved This article explores ai healthcare discovered. . If security teams don't know.

RSAC 2026: How AI Is Reshaping Cybersecurity Faster Than Ever

RSAC 2026: How AI Is Reshaping Cybersecurity Faster Than Ever

On the last day of the RSAC 2026 Conference, Kelly Jackson Higgins, Editor-in-Chief of ZeroOwl and Vice President of Cybersecurity Editorial at Informa.

Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools

Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools

Cisco Talos and Trend Micro have found evidence that hackers are using the "bring your own vulnerable driver" (BYOVD) method to turn off security tools on.

Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps

Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps

The old way of thinking about a single operating system has been replaced by a more complicated world where threats can get into systems on many different.

Lies, Damned Lies, and Cybersecurity Metrics

Lies, Damned Lies, and Cybersecurity Metrics

Even though a lot of money has been spent on tools, people, and other resources, cybersecurity results are still getting worse This article explores.

Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations

Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations

A hacker who is thought to be connected to Iran is thought to be behind a campaign to spread passwords This article explores uae attacks linked. . The.

Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCs

Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCs

Iranian cyber actors are putting US industrial control systems that are connected to the internet at risk. These cyberattacks have made PLCs less.

Human vs AI: Debates Shape RSAC 2026 Cybersecurity Trends

Human vs AI: Debates Shape RSAC 2026 Cybersecurity Trends

RSAC 2026 is a very important event for people who work in cybersecurity This article explores informa techtarget ai. . Expect to talk about new threats.

Focusing on the People in Cybersecurity at RSAC 2026 Conference

Focusing on the People in Cybersecurity at RSAC 2026 Conference

Discover how Even though AI integration is getting a lot of attention around the world, cybersecurity experts are still very important. Cybersecurity.

DPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South Korea

DPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South Korea

Fortinet FortiGuard Labs started the attack chain with hidden Windows shortcut (LNK) files This article explores korea hacking group. . You can use LNK.

BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks

BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks

The German Federal Criminal Police Office, or BKA, has revealed the true identities of two well-known people who were part of the former REvil (also known.

Axios Attack Shows Social Complex Engineering Is Industrialized

Axios Attack Shows Social Complex Engineering Is Industrialized

Discover how A North Korean threat group called UNC1069 broke into the Axios package on npm. Jason Saayman, the lead maintainer, was tricked into.

Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems

Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems

Anthropic showed off Project Glasswing, an AI-based cybersecurity project that uses Claude Mythos This article explores project glasswing ai. . The goal.

AI Is Becoming a Digital Employee. Why Are We Still Securing It Like Software?

AI Is Becoming a Digital Employee. Why Are We Still Securing It Like Software?

Discover how When you use traditional software, you get clear instructions on how to use the systems. When we deploy an AI agent, on the other hand, we.

⚡ Weekly Roundup: Fortinet Exploits, Chrome 0-Day, Paragon Spyware, and More

⚡ Weekly Roundup: Fortinet Exploits, Chrome 0-Day, Paragon Spyware, and More

North Korean hackers got into the Axios package, which has more than 100 million downloads a week. The fact that the malware deletes itself shows that the.

Top 5 this week

Page 1 of 22