Cyber Security
Apple Releases iOS and iPadOS Updates to Patch Coruna Exploits
Veeam Software Fixes Critical RCE Vulnerabilities in Backup & Replication Solution
England Hockey Investigates Possible Data Breach by AiLock Ransomware Group
International Operation Dismantles the Dangerous SocksEscort Proxy Service
Apple Patches Older iPhones and iPads Against Coruna Exploit Kit Attacks
Cybercriminals Target Airline Loyalty Programs: A New Threat to Travelers
Global Arrests Made in a Social Media Scam Targeting Thousands
SQL Injection Flaw in Ally WordPress Plugin Puts 400,000 Sites at Risk
WhatsApp Introduces Parent-Controlled Accounts for Younger Users
Senate Confirms Joshua Rudd to Lead the NSA and US Cyber Command
Police Scotland Fined £66,000 for Mishandling Sensitive Victim Data
‘PhantomRaven’ Supply-Chain Campaign Floods npm Registry with Malicious Packages
Stryker Healthcare Faces Cybersecurity Breach Linked to Hacktivist Group
Critical Security Vulnerabilities Patched in n8n Workflow Automation Platform
Google Cloud Strengthens Its Position with the $32 Billion Acquisition of Wiz
Fake Starlink Android Apps Spread BeatBanker Malware
ELECQ Data Breach May Have Exposed EV Charger Users’ Private Information
Ericsson Inc. Faces Data Breach Through a Third-Party Service Provider
Malicious npm Package Disguises as OpenClaw Installer for Data Theft
ShinyHunters Breaches Salesforce and 100 Companies Using Mandiant’s Own Tool
Salesforce’s Experience Cloud Platform Faces Vulnerability Challenges
North Korean Group UNC4899 Suspected Behind Cryptocurrency Cloud Heist in 2025
Microsoft Still Working to Fix Bright White Flash Issue in Windows 11 File Explorer
Evasive ClickFix Tactic Leverages Windows Terminal to Avoid Detection
Perplexity’s Comet Browser Had a Flaw That Left Users Vulnerable to Local File Theft
Tier 1 SOC Analysts Are Carrying More Weight Than They Should
Joint Operation Dismantles Criminal Syndicate Exploiting Ukrainian War Refugees
JavaScript Worm Disrupts Wikimedia Platforms Across Multiple Wikis
WordPress Plugin Vulnerability Puts Over 60,000 Sites at Risk
US Government Contractor’s Son Charged with Cryptocurrency Theft from US Marshals Service
Microsoft Teams Is Adding Automatic Bot Tagging in Meeting Lobbies
Application Security
Microsoft Teams Is Adding Automatic Bot Tagging in Meeting Lobbies
Microsoft improves control over third-party bots in Teams meetings.
Canadian Outsourcing Leader Telus Digital Faces a Severe Data Breach
Cybersecurity
Canadian Outsourcing Leader Telus Digital Faces a Severe Data Breach
Telus Digital hit by data breach, with claims of nearly 1 petabyte stolen over months.
VENON Banking Malware Targets Brazilian Users With Rust-Based Code
Cybersecurity
VENON Banking Malware Targets Brazilian Users With Rust-Based Code
New banking malware VENON targets Brazilian users, developed in Rust, diverging from traditional Delphi-based threats.
Apple Releases iOS and iPadOS Updates to Patch Coruna Exploits
Application Security
Apple Releases iOS and iPadOS Updates to Patch Coruna Exploits
Apple issues iOS and iPadOS updates to address vulnerabilities, safeguarding against the Coruna exploit.
Veeam Software Fixes Critical RCE Vulnerabilities in Backup & Replication Solution
Application Security
Veeam Software Fixes Critical RCE Vulnerabilities in Backup & Replication Solution
Veeam Software addresses critical security flaws in their Backup & Replication tool, preventing potential remote code execution risks.
England Hockey Investigates Possible Data Breach by AiLock Ransomware Group
Cybersecurity
England Hockey Investigates Possible Data Breach by AiLock Ransomware Group
England Hockey is assessing a potential data breach by the AiLock ransomware gang that listed it on its data leak site.
International Operation Dismantles the Dangerous SocksEscort Proxy Service
Cybersecurity
International Operation Dismantles the Dangerous SocksEscort Proxy Service
Global law enforcement dismantles SocksEscort proxy service involved in digital fraud, impacting numerous networks worldwide.
Slopoly Malware Linked to Interlock Ransomware Attack
News
Slopoly Malware Linked to Interlock Ransomware Attack
Investigating Slopoly malware's impact, AI origins, and role in Interlock attacks.
Apple Patches Older iPhones and iPads Against Coruna Exploit Kit Attacks
Cybersecurity
Apple Patches Older iPhones and iPads Against Coruna Exploit Kit Attacks
Apple patches actively exploited vulnerabilities in older iPhones and iPads, addressing security gaps targeted by the Coruna exploit kit.
Cybercriminals Target Airline Loyalty Programs A New Threat to Travelers
Cybersecurity
Cybercriminals Target Airline Loyalty Programs: A New Threat to Travelers
Airline miles stolen by cybercriminals are transformed into flights and hotel stays, then sold as discounted travel.
Global Arrests Made in a Social Media Scam Targeting Thousands
Cybersecurity
Global Arrests Made in a Social Media Scam Targeting Thousands
Authorities dismantle a major social media scam ring, arresting suspects and affecting thousands.
SQL Injection Flaw in Ally WordPress Plugin Puts 400,000 Sites at Risk
Application Security
SQL Injection Flaw in Ally WordPress Plugin Puts 400,000 Sites at Risk
An SQL injection flaw in the Ally WordPress plugin poses data breach risks on over 400,000 websites.
WhatsApp Introduces Parent-Controlled Accounts for Younger Users
Cybersecurity
WhatsApp Introduces Parent-Controlled Accounts for Younger Users
WhatsApp rolls out a feature for parent-managed accounts, enhancing safety for pre-teen users.
Senate Confirms Joshua Rudd to Lead the NSA and US Cyber Command
Cybersecurity
Senate Confirms Joshua Rudd to Lead the NSA and US Cyber Command
The Senate has confirmed Joshua Rudd to head both the NSA and US Cyber Command, continuing the "dual-hat" arrangement.
Police Scotland Fined £66,000 for Mishandling Sensitive Victim Data
Cybersecurity
Police Scotland Fined £66,000 for Mishandling Sensitive Victim Data
Police Scotland faces a £66,000 fine due to mishandling sensitive data.
'PhantomRaven' Supply-Chain Campaign Floods npm Registry with Malicious Packages
Application Security
‘PhantomRaven’ Supply-Chain Campaign Floods npm Registry with Malicious Packages
'PhantomRaven' attacks are affecting JavaScript developers by targeting the npm registry with dozens of malicious packages designed to steal sensitive...
Stryker Healthcare Faces Cybersecurity Breach Linked to Hacktivist Group
Cybersecurity
Stryker Healthcare Faces Cybersecurity Breach Linked to Hacktivist Group
Stryker, a medical tech leader, attacked by pro-Palestinian hacktivist group Handala, using impactful wiper malware.
Critical Security Vulnerabilities Patched in n8n Workflow Automation Platform
CVE Vulnerability Alerts
Critical Security Vulnerabilities Patched in n8n Workflow Automation Platform
Two critical security vulnerabilities in n8n automation platform have been patched.
Google Cloud Strengthens Its Position with the $32 Billion Acquisition of Wiz
Cybersecurity
Google Cloud Strengthens Its Position with the $32 Billion Acquisition of Wiz
Google completes $32 billion acquisition of cloud security leader Wiz, expanding its cybersecurity capabilities.
Fake Starlink Android Apps Spread BeatBanker Malware
Cybersecurity
Fake Starlink Android Apps Spread BeatBanker Malware
BeatBanker Android malware targets users through fake apps.

TOP CYBERSECURITY HEADLINES

This Week’s Security Spotlight

Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Featured Videos​

  • All
  • Application Security
  • Blog
  • CVE Vulnerability Alerts
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Identity and Access Management
  • Information Security
  • Network Security
  • News
  • Phishing
  • Podcasts
  • Product Reviews
  • Ransomware
  • Ransomware Victims
  • Resources
  • Security Spotlight
  • Sponsored
  • Threat Actors
  • Threat Actors
  • Threat Detection Tools
Apple Releases iOS and iPadOS Updates to Patch Coruna Exploits
Apple issues iOS and iPadOS updates to address vulnerabilities, safeguarding against the Coruna exploit.
Veeam Software Fixes Critical RCE Vulnerabilities in Backup & Replication Solution
Veeam Software addresses critical security flaws in their Backup & Replication tool, preventing potential remote code execution risks.
England Hockey Investigates Possible Data Breach by AiLock Ransomware Group
England Hockey is assessing a potential data breach by the AiLock ransomware gang that listed it on its data leak site.
International Operation Dismantles the Dangerous SocksEscort Proxy Service
Global law enforcement dismantles SocksEscort proxy service involved in digital fraud, impacting numerous networks worldwide.
Slopoly Malware Linked to Interlock Ransomware Attack
Investigating Slopoly malware's impact, AI origins, and role in Interlock attacks.
Apple Patches Older iPhones and iPads Against Coruna Exploit Kit Attacks
Apple patches actively exploited vulnerabilities in older iPhones and iPads, addressing security gaps targeted by the Coruna exploit kit.
Cybercriminals Target Airline Loyalty Programs: A New Threat to Travelers
Airline miles stolen by cybercriminals are transformed into flights and hotel stays, then sold as discounted travel.
Global Arrests Made in a Social Media Scam Targeting Thousands
Authorities dismantle a major social media scam ring, arresting suspects and affecting thousands.
SQL Injection Flaw in Ally WordPress Plugin Puts 400,000 Sites at Risk
An SQL injection flaw in the Ally WordPress plugin poses data breach risks on over 400,000 websites.
WhatsApp Introduces Parent-Controlled Accounts for Younger Users
WhatsApp rolls out a feature for parent-managed accounts, enhancing safety for pre-teen users.
Senate Confirms Joshua Rudd to Lead the NSA and US Cyber Command
The Senate has confirmed Joshua Rudd to head both the NSA and US Cyber Command, continuing the "dual-hat" arrangement.
Police Scotland Fined £66,000 for Mishandling Sensitive Victim Data
Police Scotland faces a £66,000 fine due to mishandling sensitive data.
‘PhantomRaven’ Supply-Chain Campaign Floods npm Registry with Malicious Packages
'PhantomRaven' attacks are affecting JavaScript developers by targeting the npm registry with dozens of malicious packages designed to steal sensitive...
Stryker Healthcare Faces Cybersecurity Breach Linked to Hacktivist Group
Stryker, a medical tech leader, attacked by pro-Palestinian hacktivist group Handala, using impactful wiper malware.
Critical Security Vulnerabilities Patched in n8n Workflow Automation Platform
Two critical security vulnerabilities in n8n automation platform have been patched.
Google Cloud Strengthens Its Position with the $32 Billion Acquisition of Wiz
Google completes $32 billion acquisition of cloud security leader Wiz, expanding its cybersecurity capabilities.
Fake Starlink Android Apps Spread BeatBanker Malware
BeatBanker Android malware targets users through fake apps.
ELECQ Data Breach May Have Exposed EV Charger Users’ Private Information
ELECQ warns of potential data theft after ransomware attack on its cloud systems.
Ericsson Inc. Faces Data Breach Through a Third-Party Service Provider
Ericsson Inc. reports data theft affecting employees and customers due to a service provider breach.
Malicious npm Package Disguises as OpenClaw Installer for Data Theft
New npm threat involves package posing as OpenClaw installer deploying RAT to steal sensitive data.