Cyber Security
Sandworm Fake Job Interview Campaign Targets Ukrainian IT Workers
Kimwolf v7 Android Botnet Evades DDoS Mitigation Using HTTP/2 C2
SharePoint RCE CVE-2026-55040 First Confirmed Ransomware Exploit
Polish Power Plant Turbine Stopped After Cellular ICS Network Breach
Metabase Zero-Day SQL Injection Exploited Against Framework, Tally
Attackers Reach Managed Endpoints as N-able Ships N-central Hotfix 2
CISA Adds Exploited Kemp LoadMaster Command Injection to KEV
Atlassian Rovo One-Click Flaw Exposes Jira, Confluence Data
CSS Attacks Break Webmail Boundaries to Capture Passwords, Tokens
Head Mare Breaches TrueConf Servers, Trojanizes Client Installers
Belgian Connective eID Flaws Let Websites Forge Signatures
Solidity Pro VS Code Extensions Steal Wallets, API Keys From Devs
OpenAI Pauses Astra Work After Evaluation Flags Cyber Capabilities
AitM Phishing Campaign Steals Microsoft 365 Finance Emails
Swiss Government SharePoint Breach Compromised 200 Accounts
UNC6671 Extortion Group Rebrands After Targeting Hedge Funds
3.8 Million Impacted by Unlimited Technology Systems Breach
4,407 Rockwell PLCs Exposed Online, 22 in Water Cities
Zapscape KVM Flaw Lets Privileged L1 Guest Escape to Host
TONTOU Interrupt Injection Bypasses Spectre v2 Fixes on AMD Zen 2
NatJack Attacks Hijack TCP Sessions and Spoof DNS via NAT
Claude Code and Gemini CLI Flaws Expose CI Workflow Secrets
AI-Assisted HTTP Terminator Finds Apache Traffic Server Zero-Day
TeamPCP Tied to Redis Attacks Dating Back to 2020
CryptoJS Weak RNG Behind $5.7M in Five Wallet App Drains
iCloud Private Relay WebKit Bypasses Expose Users’ Real IPs
ClickFix Campaign Pushes Go-Based macOS Crypto Drainer
China Launches Probe Into Palo Alto Networks Product Security
Attackers Compile khunt Inside Oracle to Reach Windows SYSTEM
Zbtlink Routers Ship With ENDLESSDOORS Backdoor Opening Root Shells
Casio Data Breach Ransomware Attack Compromised 8,500 Individuals
News
Casio Data Breach Ransomware Attack Compromised 8,500 Individuals
Casio confirms customer data compromised in ransomware attack
Green Bay Packers Pro Shop Data Breach Exposes Customer Information
News
Green Bay Packers Pro Shop Data Breach Exposes Customer Information
Green Bay Packers data breach affected NFL team's Packers Pro Shop website with customer's info compromised.
Rivers Casino Data Breach Follows Class-Action Lawsuits After Personal Information Compromised
News
Rivers Casino Data Breach Follows Class-Action Lawsuits After Personal Information Compromised
Rivers Casino Philadelphia data breach exposed sensitive customer information, leading to multiple class-action lawsuits. Learn about the extent of the breach and the legal actions ...
PowerSchool Hack Exposes Sensitive Data of Students and Teachers in K-12 Districts
News
PowerSchool Hack Exposes Sensitive Data of Students and Teachers in K-12 Districts
PowerSchool hack exposed student and teacher data from K-12 districts, including SSNs and PII, prompting investigations and credit monitoring services for those affected.
Top 15 Cyberattacks of 2024 The Worst Incidents for Enterprise
Blog
Top 15 Cyberattacks of 2024: The Worst Incidents for Enterprise
2024 saw a record number of significant cyberattacks targeting enterprises. This blog post dissects the Top 15 Cyber Attacks of 2024, examining the impact, vulnerabilities ...
Hacked Chrome Extensions Expose 2.6 Million Users to Data Leaks
News
Hacked Chrome Extensions Expose 2.6 Million Users to Data Leaks
Over 36 Hacked Chrome extensions put 2.6 million users at risk of data leaks, exposing browsing data and credentials. Security researchers urge immediate removal of ...
Westend Dental Fined $350,000 for Covering Up Ransomware Attack Data Breach
News
Westend Dental Fined $350,000 for Covering Up Ransomware Attack Data Breach
Westend Dental LLC, a US dental chain, was fined $350,000 for lying about a 2020 ransomware attack that resulted in a major data breach. Their ...
Nuclei Vulnerability Allows Signature Bypass and Code Execution
Cybersecurity
Nuclei Vulnerability Allows Signature Bypass and Code Execution
Nuclei vulnerability (CVE-2024-43405) allows signature bypass and code execution due to inconsistencies in newline character handling between signature verification and YAML parsing. Update to version ...
Washington Sues T-Mobile Over Data Breach Impacting Millions
News
Washington Sues T-Mobile Over Data Breach Impacting Millions
Washington state sued T-Mobile for a massive data breach affecting millions, alleging negligence and inadequate customer notification. The T-Mobile data breach exposed sensitive personal information.
City Bank Data Breach: Client Financial Statements Sold on Underground Forums
News
City Bank Data Breach: Client Financial Statements Sold on Underground Forums
City Bank data breach resulted in client financial statements being sold on underground forums. The vulnerability, involving weak multi-factor authentication and improper session handling, was ...
PLAYFULGHOST Malware: Exploiting Phishing, SEO Poisoning, and Trojanized VPNs
News
PLAYFULGHOST Malware: Exploiting Phishing, SEO Poisoning, and Trojanized VPNs
PLAYFULGHOST malware uses phishing, SEO poisoning, and trojanized VPN apps to steal data, highlighting the need for robust cybersecurity practices.
Hacker 'natohub' Claims 42,000 Records in UN Civil Aviation Agency Data Breach
News
Hacker ‘natohub’ Claims 42,000 Records in UN Civil Aviation Agency Data Breach
A hacker claims a data breach at the ICAO, a UN agency, affecting 42,000 individuals. The ICAO is investigating.
This Week In Cybersecurity: 30th December to 03rd January
Cybersecurity
This Week In Cybersecurity: 30th December to 03rd January
This week in cybersecurity, major incidents include Volkswagen's breach of 800,000 vehicle data, Japan Airlines' DDoS disruptions, and Rhode Island's RIBridges data leak affecting 650,000 ...
Japan Mobile Carrier NTT Docomo Suffers Cyberattack Causing System Glitch and Service Disruptions
News
Japan Mobile Carrier NTT Docomo Suffers Cyberattack Causing System Glitch and Service Disruptions
Japan's largest mobile carrier, NTT Docomo, experienced a significant system glitch and service disruptions due to a cyberattack, impacting its website and "d payment" service. ...
Rutherford County Schools Data Breach: Student Data Compromised
News
Rutherford County Schools Data Breach: Student Data Compromised
The Rutherford County Schools data breach compromised student and employee data, including Social Security numbers. Experts urge parents to monitor credit reports and utilize FTC ...
US Treasury Hack: Escalating Cyber Warfare Between US and China
Cybersecurity
US Treasury Hack: Escalating Cyber Warfare Between US and China
The recent US Treasury cyberattack highlights the escalating threat landscape. Learn how enterprise businesses can bolster their defenses against sophisticated state-sponsored attacks like the US ...
Cyber Attacks Hit French Internet Sites: Multiple Cities Targeted in Pro-Russia Hack
News
Cyber Attacks Hit French Internet Sites: Multiple Cities Targeted in Pro-Russia Hack
French cities faced widespread website outages due to cyberattacks claimed by a pro-Russian group, highlighting vulnerabilities to politically motivated digital disruptions.
This Week In Cybersecurity: 23rd December to 27th December
News
This Week In Cybersecurity: 23rd December to 27th December
This Week In Cybersecurity covers the latest incidents and trends from December 23rd to December 27th. Highlights include the Play ransomware gang's breach of Krispy ...
Rhode Island's RIBridges Hack: Data Leaked on Dark Web on New Year's Day
News
Rhode Island’s RIBridges Hack: Data Leaked on Dark Web on New Year’s Day
The RIBridges data breach exposes the sensitive information of approximately 650,000 Rhode Islanders. The state is working to mitigate the damage and provide support to ...
Volkswagen Data Leak Exposes Location Data of 800,000 Electric Vehicles
News
Volkswagen Data Leak Exposes Location Data of 800,000 Electric Vehicles
Volkswagen data leak exposed the location data of 800,000 electric vehicles, along with personal details for some drivers, highlighting serious security flaws.
Application Security
SAP Patches Zero-Day in Commerce Cloud Data Hub Adapter
Cybersecurity
Gunra Ransomware Exploits Fortinet and Schneider Flaws for MFA Bypass
Application Security
SharePoint RCE CVE-2026-55040 First Confirmed Ransomware Exploit

TOP CYBERSECURITY HEADLINES

This Week’s Security Spotlight

Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Featured Videos​

Podcasts

Sorry, we couldn't find any posts. Please try a different search.

  • All
  • Application Security
  • Blog
  • CVE Vulnerability Alerts
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Identity and Access Management
  • Information Security
  • Network Security
  • News
  • Phishing
  • Podcasts
  • Product Reviews
  • Ransomware
  • Ransomware Victims
  • Resources
  • Security Spotlight
  • Sponsored
  • Threat Actors
  • Threat Actors
  • Threat Detection Tools
DragonForce Expands Ransomware Model with White-Label Branding
DragonForce expands its ransomware cartel with a white-label model, allowing affiliates to use its infrastructure under their own brand, taking a 20% cut of ransoms. ...
SK Telecom Shares Drop Sharply Following a Cyberattack and Customer Data Breach
SK Telecom Reports Customer Data Breach Linked to Cyberattack SK Telecom, South Korea’s largest mobile carrier, announced that it suffered a major customer data breach ...
Lazarus Strikes Again: Inside Operation SyncHole and the 1-Day Exploitation Crisis
In this episode, we break down the most urgent cybersecurity developments from late April 2025—including the Lazarus Group’s high-profile “Operation SyncHole” targeting South Korean industries. ...
OAuth Phishing and Microsoft 365: The Hidden Threats SMBs Can’t Ignore
In this episode, we dissect the real-world challenges of securing Microsoft 365 environments—especially for small and medium-sized businesses—amid rising threats and licensing limitations. From Reddit ...
Navigating the Complex Intersection of AI and Data Privacy
The rise of artificial intelligence (AI) presents incredible opportunities, but it also introduces complex challenges regarding data privacy. This blog post delves into the crucial ...
Why Outlook Is Eating Your CPU — And What Microsoft Says About It
Microsoft has acknowledged a serious issue affecting users of classic Outlook for Windows: CPU usage spikes up to 50% just from typing emails. First appearing ...
Russian Military Targeted by AlpineQuest Android Spyware Hidden in Trojanized Mapping App
Spyware hidden in a fake AlpineQuest app is stealing sensitive data from Russian soldiers, revealing operational plans via location tracking and real-time Telegram monitoring.
Frederick Health Data Breach Impacts 934,326 Patients
In January, a ransomware attack on Frederick Health Medical Group exposed sensitive data of 934,326 patients, triggering law enforcement involvement and mandatory federal breach reporting. ...
This Week In Cybersecurity: 21st – 25th April, 2025
Targeted malware, ransomware, phishing, and ad fraud hit SK Telecom, Baltimore schools, Google, and more this week—exposing critical data and abusing trusted systems.
Interlock Ransomware Gang Claims DaVita Cyberattack, Leaks 1.5TB of Stolen Data
The Interlock ransomware group has claimed responsibility for a cyberattack on DaVita, leaking 1.5TB of sensitive data allegedly stolen from the Fortune 500 healthcare provider.
MTN Confirms Data Breach Impacting Customer Information, Core Systems Unaffected
MTN confirms a data breach exposing limited customer data, assures core systems are safe. Law enforcement and regulators have been notified as investigations continue.
Trojan Map App: Spyware Targets Russian Soldiers via Alpine Quest
A newly discovered Android spyware campaign is targeting Russian military personnel by weaponizing a popular mapping app. Disguised as a cracked version of Alpine Quest ...
Blue Shield Breach: 4.7 Million Health Records Leaked via Google Analytics
Blue Shield of California has confirmed a data breach affecting 4.7 million members—caused not by hackers, but by a misconfigured Google Analytics setup. Sensitive health ...
$16.6 Billion Lost: The True Cost of Cybercrime in America
Cybercrime in the U.S. has reached new, record-breaking heights. In this episode, we dive deep into the FBI’s 2024 Internet Crime Complaint Center (IC3) report ...
Vulnerability Alert: 08th April, 2025
Below are detailed summaries of multiple victims affected by these vulnerabilities, highlighting the nature of each threat and the potential impact on security. CVE Alert: ...
System Intrusions Surge Across EMEA, Verizon DBIR Warns
System intrusion breaches in EMEA doubled to 53% in one year, according to Verizon’s 2025 DBIR, as internal threats and third-party involvement surged globally.
Data Breach at Yale New Haven Health Exposes Personal Information of 5.5 Million Patients
A data breach at Yale New Haven Health exposed personal details of 5.5 million patients, with names, SSNs, and medical IDs among the data stolen. ...
New Android Malware ‘SuperCard X’ Uses NFC to Drain Bank Accounts in Real Time
New Android malware 'SuperCard X' uses NFC technology and social engineering to clone cards and drain bank accounts in real-time through a convincing multi-step scam. ...
Massive 1.33 Million-Device Botnet Drives Unprecedented DDoS Attacks Surge in Q1 2025
A record-breaking 1.33 million-device botnet has driven a 110% surge in DDoS attacks in Q1 2025, targeting fintech, e-commerce, and telecom sectors.
Blue Shield of California Exposes Health Data of 4.7 Million Members to Google Due to Analytics Misconfiguration
Blue Shield of California disclosed a data breach impacting 4.7 million members after misconfigured Google Analytics exposed protected health information to Google Ads platforms.