CYBERSECURITY

The GlassWorm threat has caused more supply chain chaos, contaminating software components with thousands of downstream users This article explores

The artificial intelligence (AI) assistant Ask Gordon, which is integrated into Docker Desktop the Docker Command-Line Interface (CLI)

"No reject" cookie banners This article explores concerns sneaky saas. . subscriptions with a free trial that are ridiculously hard to cancel.

Within ten minutes, attackers were able obtain administrative access

Today, the majority of security teams are bogged down in tools.

exploitation of CVE-2025-11953 also known as Metro4Shell was first noticed on December 21

It has been difficult overlook recent significant outages in cloud services This article explores outages cloud services.

Attacks using a recently revealed Microsoft Office security vulnerability have been linked to the Russia-affiliated state-sponsored threat actor

The recently found compromise of the infrastructure hosting Notepad++ has been attributed with medium confidence Lotus Blossom

On Monday, Mozilla revealed a new controls section that lets users fully disable generative artificial intelligence (GenAI) features in the Firefox

Seven years after they were arrested for doing their jobs as penetration testers, two white hat hackers have earned a $600,000 settlement in Dallas

For almost six months, Notepad++'s software update mechanism was taken over a likely China-sponsored threat actor

Using a multistage obfuscation technique, a new phishing scheme seeks to fool companies into disclosing their Dropbox logins.

According to recent findings from Koi Security a security audit of 2,857 skills on ClawHub revealed 341 malicious skills across several campaigns

ShinyHunters has expanded its extortion attacks various software-as-a-service (SaaS) environments

OpenClaw (formerly known as Clawdbot and Moltbot) has been found to have a high-severity security vulnerability that could enable remote code

Microsoft has announced a three-phase approach phase out New Technology LAN Manager (NTLM) as part of its efforts

Concerned business users have been debating the potential of AI as a tool boost cybercriminals' productivity for a while now.

Cybersecurity is a continual balancing act for mid-market companies This article explores security endpoint protection.

The state of cybersecurity is shaped new findings

The maintainer of Notepad++ has revealed that state-sponsored attackers hijacked the utility's update mechanism redirect update traffic

Security teams are aware of the variety of adversaries that could target them including nation-state hackers

The update infrastructure for eScan antivirus, a security solution developed by Indian cybersecurity company MicroWorld Technologies, has been

Details of a supply chain attack that targeted the Open VSX Registry have been made public cybersecurity researchers.

Security Orchestration, Automation and Response (SOAR) can now scale well beyond the limitations of conventional platforms thanks to the

A new campaign that targets non-governmental organizations and individuals involved in documenting recent human rights abuses is suspected to be the

On Friday, Google-owned Mandiant announced that it had discovered a "expansion in threat activity" that employs tradecraft typical of

On Friday, Google-owned Mandiant announced that it had discovered a "expansion in threat activity" that employs tradecraft typical of

Coordinated cyberattacks targeted over 30 wind and solar farms a private manufacturing company according to CERT Polska

According to conventional wisdom attackers