CYBERSECURITY

Cybercriminals are increasingly using trusted cloud platforms launch phishing attacks

Threat actors are disseminating the ValleyRAT backdoor under the guise of a genuine installer for the well-known messaging app LINE in a

Beyond conventional IAM controls, a novel method for identifying, evaluating, and controlling identity usage.

Throughout 2025, a new wave of cyberespionage campaigns targeting government and law enforcement agencies throughout Southeast Asia has been linked

Large language models (LLMs) and artificial intelligence (AI) agents are already supplementing even replacing many human pen testers

After a hacktivist group leaked 2.3TB of data online, the information of over a quarter (28%) of Mexico's population may be at risk This article

Active Directory serves as the foundationof enterprise authentication systems, making ita prime target for sophisticated threat actors This

Lack of technical expertise when information is lacking pressure is high. With little telemetry

Two five-alarm security flaws in a well-known Google data service have been found researchers

Microsoft has issued a warning that information-stealing attacks are "rapidly expanding" beyond Windows target Apple macOS environments

In order to counter supply chain threats the Eclipse Foundation is responsible for maintaining the Open VSX Registry

On Tuesday the U.S.

DNS (Domain Name System) silently converts a website address into an IP address in the background when you type it into your browser This article

Russia's infamous APT28 cyber-espionage group has started abusing a recently patched Microsoft vulnerability steal emails

The GlassWorm threat has caused more supply chain chaos, contaminating software components with thousands of downstream users This article explores

The artificial intelligence (AI) assistant Ask Gordon, which is integrated into Docker Desktop the Docker Command-Line Interface (CLI)

"No reject" cookie banners This article explores concerns sneaky saas. . subscriptions with a free trial that are ridiculously hard to cancel.

Within ten minutes, attackers were able obtain administrative access

Today, the majority of security teams are bogged down in tools.

exploitation of CVE-2025-11953 also known as Metro4Shell was first noticed on December 21

It has been difficult overlook recent significant outages in cloud services This article explores outages cloud services.

Attacks using a recently revealed Microsoft Office security vulnerability have been linked to the Russia-affiliated state-sponsored threat actor

The recently found compromise of the infrastructure hosting Notepad++ has been attributed with medium confidence Lotus Blossom

On Monday, Mozilla revealed a new controls section that lets users fully disable generative artificial intelligence (GenAI) features in the Firefox

Seven years after they were arrested for doing their jobs as penetration testers, two white hat hackers have earned a $600,000 settlement in Dallas

For almost six months, Notepad++'s software update mechanism was taken over a likely China-sponsored threat actor

Using a multistage obfuscation technique, a new phishing scheme seeks to fool companies into disclosing their Dropbox logins.

According to recent findings from Koi Security a security audit of 2,857 skills on ClawHub revealed 341 malicious skills across several campaigns

ShinyHunters has expanded its extortion attacks various software-as-a-service (SaaS) environments

OpenClaw (formerly known as Clawdbot and Moltbot) has been found to have a high-severity security vulnerability that could enable remote code