CYBERSECURITY

Cybersecurity experts have discovered a new piece of malware called Speagle that takes over the features and infrastructure of a real program called Cobra.

A new study of endpoint detection and response (EDR) killers has found that 54 of them use a method called "bring your own vulnerable driver" (BYOVD) to.

Discover how Cybersecurity researchers have found a new family of Android malware called Perseus that is being spread in the wild with the goal of taking.

For years, security teams have been working on identity and access controls for both people and service accounts This article explores security tool.

Reports from Google Threat Intelligence Group (GTIG), iVerify, and Lookout say that since at least November 2025, several threat actors have been using a.

The European Council has put sanctions on three companies that are supposedly private—two in China and one in Iran—for helping with and carrying out.

The vulnerabilities in question are as follows: There are currently no public reports about who may be taking advantage of these flaws or how widespread.

Attackers all over the world are using a new iOS exploit chain that works for both spies and attackers who want to make money. This week, Google, iVerify.

A technical analysis of a command-and-control (C2) implant that first appeared in December 2025 gives us new information about how these tools let threat.

The Office of Foreign Assets Control (OFAC) at the U.S This article explores jasper sleet tradecraft. . Department of the Treasury has punished six people.

Amazon Threat Intelligence says that an active Interlock ransomware campaign is taking advantage of a serious security hole that was recently made public.

In cybersecurity, good communication is often what keeps technical and non-technical teams from working together This article explores communication.

An attack chain with three different flaws in Anthropic's Claude AI agent could have let attackers put harmful hidden instructions in a pre-filled chat.

A serious security flaw in default installations of Ubuntu Desktop versions 24.04 and later could be used to gain root-level access This article explores.

Recent cyber-espionage activity linked to the SideWinder threat group suggests that the India-linked operation has spread across Southeast Asia, including.

These days, security teams have plenty of tools and information. They are too much for them. But even with all the alerts, exposures, and.

Cybersecurity researchers have found a serious security hole in the GNU InetUtils telnet daemon (telnetd) that an unauthenticated remote attacker could.

A Magecart payload can hide in the EXIF data of a dynamically loaded third-party favicon, and no repository scanner will find it because the bad code.

Cybersecurity experts have warned about the dangers of cheap IP KVM (Keyboard, Video, Mouse over Internet Protocol) devices, which can give hackers a lot.

Cybersecurity researchers have found a serious security hole in the GNU InetUtils telnet daemon (telnetd) that an unauthorized remote attacker could use.

On Tuesday, Apple released the first set of Background Security Improvements to fix a security hole in WebKit that affects iOS, iPadOS, and macOS This.

Credential theft is now the main way that attackers get into business networks This article explores credential theft especially. . They are using stolen.

As the amount of money people pay for ransomware goes down, threat actors are changing how they use built-in tools This article explores ransomware.

Researchers at Trend Micro say that Warlock, also known as Water Manaul, has kept the same way of getting into systems during attacks in the second half.

Cybersecurity companies can be attacked in the same ways that they help their customers protect themselves from This article explores phishing operations.

Researchers in cybersecurity have revealed a new way to steal private information from artificial intelligence (AI) code execution environments by using.

LeakNet, a ransomware group, has started using ClickFix, a social engineering method that uses hacked websites to get into systems This article explores.

North Korean hackers have been seen sending phishing emails to get into people's KakaoTalk desktop apps and spread malware to some of their contacts This.

The AI and Adversarial Testing Benchmark Report 2026 from Pentera says that most security leaders are having a hard time protecting AI systems with tools.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a medium-severity security flaw that affects Wing FTP to its Known Exploited.