Cyber Security
Sandworm Fake Job Interview Campaign Targets Ukrainian IT Workers
Kimwolf v7 Android Botnet Evades DDoS Mitigation Using HTTP/2 C2
SharePoint RCE CVE-2026-55040 First Confirmed Ransomware Exploit
Polish Power Plant Turbine Stopped After Cellular ICS Network Breach
Metabase Zero-Day SQL Injection Exploited Against Framework, Tally
Attackers Reach Managed Endpoints as N-able Ships N-central Hotfix 2
CISA Adds Exploited Kemp LoadMaster Command Injection to KEV
Atlassian Rovo One-Click Flaw Exposes Jira, Confluence Data
CSS Attacks Break Webmail Boundaries to Capture Passwords, Tokens
Head Mare Breaches TrueConf Servers, Trojanizes Client Installers
Belgian Connective eID Flaws Let Websites Forge Signatures
Solidity Pro VS Code Extensions Steal Wallets, API Keys From Devs
OpenAI Pauses Astra Work After Evaluation Flags Cyber Capabilities
AitM Phishing Campaign Steals Microsoft 365 Finance Emails
Swiss Government SharePoint Breach Compromised 200 Accounts
UNC6671 Extortion Group Rebrands After Targeting Hedge Funds
3.8 Million Impacted by Unlimited Technology Systems Breach
4,407 Rockwell PLCs Exposed Online, 22 in Water Cities
Zapscape KVM Flaw Lets Privileged L1 Guest Escape to Host
TONTOU Interrupt Injection Bypasses Spectre v2 Fixes on AMD Zen 2
NatJack Attacks Hijack TCP Sessions and Spoof DNS via NAT
Claude Code and Gemini CLI Flaws Expose CI Workflow Secrets
AI-Assisted HTTP Terminator Finds Apache Traffic Server Zero-Day
TeamPCP Tied to Redis Attacks Dating Back to 2020
CryptoJS Weak RNG Behind $5.7M in Five Wallet App Drains
iCloud Private Relay WebKit Bypasses Expose Users’ Real IPs
ClickFix Campaign Pushes Go-Based macOS Crypto Drainer
China Launches Probe Into Palo Alto Networks Product Security
Attackers Compile khunt Inside Oracle to Reach Windows SYSTEM
Zbtlink Routers Ship With ENDLESSDOORS Backdoor Opening Root Shells
Dark Angels Ransomware: Sophistication & High Stakes Attacks
Resources
Dark Angels Ransomware: Sophistication & High Stakes Attacks
Overview The Dark Angels ransomware group is a sophisticated and stealthy cybercrime operation known for its targeted attacks on large ...
Salt Typhoon: A Chinese APT at War with the US
Resources
Salt Typhoon: A Chinese APT at War with the US
Salt Typhoon is considered an advanced persistent threat (APT) actor, reportedly operated by the Chinese government.
RansomHub Ransomware - A RaaS Syndicate
Resources
RansomHub Ransomware – A RaaS Syndicate
RansomHub operates as a Ransomware-as-a-Service (RaaS), providing infrastructure and code to affiliates.
This Week In Cybersecurity: 16th December to 20th December
Cybersecurity
This Week In Cybersecurity: 16th December to 20th December
Meta Fined $263.5m Over Data Breach in Europe Meta has been fined €263.5 million by Ireland’s Data Protection Commission for ...
3AM Ransomware A Deep Dive into the Latest Cyber Threat Targeting Enterprises
Blog
3AM Ransomware: A Deep Dive into the Latest Cyber Threat Targeting Enterprises
3AM Ransomware, a new and dangerous threat, is targeting enterprises globally. This blog post provides a comprehensive overview of its methods, impact, and crucial preventative ...
NBS Website Hack: Nigerian Government Faces Intensified Cyberattacks
News
NBS Website Hack: Nigerian Government Faces Intensified Cyberattacks
Hackers Intensify Attacks on Nigerian Government Websites, Seizing NBS Platform The Nigerian government is facing a wave of intensified cyberattacks, with the recent compromise of ...
Cisco Data Leak: 2.9 Gigabytes of Source Code and Internal Documents Exposed
News
Cisco Data Leak: 2.9 Gigabytes of Source Code and Internal Documents Exposed
Cisco data leak exposed 2.9 gigabytes of source code, certificates, and internal documents due to a configuration error, not a system breach. Cisco responded swiftly, ...
Rhode Island's RIBridges System Hit by Cyberattack After Repeated Cybersecurity Warnings
News
Rhode Island’s RIBridges System Hit by Cyberattack After Repeated Cybersecurity Warnings
A cyberattack on Rhode Island's RIBridges public benefits system exposed the private data of potentially hundreds of thousands, following repeated warnings from state auditors about ...
4 Crucial Automation Use Cases for Enterprise Security Automation
Blog
4 Crucial Automation Use Cases for Enterprise Security Automation
Elevate your cybersecurity posture with Security Automation. Automate threat detection, incident response, and vulnerability management to reduce risk and free up your security team. Learn ...
Meta Fined $263.5m Over Data Breach in Europe
News
Meta Fined $263.5m Over Data Breach in Europe
Meta Faces $263.5 Million EU Fine for User Data Violations
Bitter Cyberespionage Group Leverages New MiyaRAT Malware to Target Turkish Defense Organizations
News
Bitter Cyberespionage Group Leverages New MiyaRAT Malware to Target Turkish Defense Organizations
The Bitter cyberespionage group is targeting Turkish defense organizations with the new MiyaRAT malware, a sophisticated RAT with enhanced encryption and capabilities.
Namibia Ransomware Attack: Sensitive Data of Government Officials and Citizens Leaked
News
Namibia Ransomware Attack: Sensitive Data of Government Officials and Citizens Leaked
Namibia's Telecom Namibia suffered a major ransomware attack, leaking sensitive data of government officials and citizens. The hackers, Hunters International, released the data after a ...
FBI Warns of HiatusRAT Malware Attacks Targeting Web Cameras and DVRs
News
FBI Warns of HiatusRAT Malware Attacks Targeting Web Cameras and DVRs
The FBI warns of widespread HiatusRAT malware attacks targeting vulnerable web cameras and DVRs, primarily Chinese-branded devices, exploiting known vulnerabilities and weak passwords. Urgent action ...
Texas Tech University Data Breach Exposes Data of 1.4 Million Patients
News
Texas Tech University Data Breach Exposes Data of 1.4 Million Patients
A cyberattack on the Texas Tech University Health Sciences Center exposed the sensitive data of 1.4 million patients, including names, addresses, Social Security numbers, and ...
Nebraska AG Files Change Healthcare Lawsuit Following Devastating Data Breach
News
Nebraska AG Files Change Healthcare Lawsuit Following Devastating Data Breach
Nebraska Attorney General Mike Hilgers filed a lawsuit against Change Healthcare, alleging failures after a data breach exposed sensitive information of hundreds of thousands of ...
Cleo Data Theft: Clop Ransomware Gang Takes Credit for Attack
News
Cleo Data Theft: Clop Ransomware Gang Takes Credit for Attack
Clop ransomware group has confirmed its role in the recent Cleo data theft attacks, leveraging zero-day exploits in Cleo's file transfer platforms to steal sensitive ...
Rhode Island RIBridges Data Breach: Ransomware Attack Poses Imminent Data Leak Threat
News
Rhode Island RIBridges Data Breach: Ransomware Attack Poses Imminent Data Leak Threat
Rhode Island RIBridges data breach: Hackers threaten to release sensitive data IMMINENTLY.
390,000 WordPress Accounts Hacked by MUT-1244 in Supply Chain Attack
News
390,000 WordPress Accounts Hacked by MUT-1244 in Supply Chain Attack
Over 390,000 WordPress credentials were stolen in a year-long supply chain attack by MUT-1244, compromising security researchers, penetration testers, and even other malicious actors. The ...
This Week In Cybersecurity: 9th December to 13th December
Cybersecurity
This Week In Cybersecurity: 9th December to 13th December
Krispy Kreme Cyberattack Disrupts Online Orders, Impacts US Operations Krispy Kreme confirmed a cyberattack on November 29, 2024, disrupting its ...
New IOCONTROL Malware Threatens Critical Infrastructure in Israel and the US
News
New IOCONTROL Malware Threatens Critical Infrastructure in Israel and the US
Iranian-linked hackers are using the newly discovered IOCONTROL malware to target critical infrastructure in Israel and the US, compromising IoT devices and SCADA systems. The ...
Application Security
SAP Patches Zero-Day in Commerce Cloud Data Hub Adapter
Cybersecurity
Gunra Ransomware Exploits Fortinet and Schneider Flaws for MFA Bypass
Application Security
SharePoint RCE CVE-2026-55040 First Confirmed Ransomware Exploit

TOP CYBERSECURITY HEADLINES

This Week’s Security Spotlight

Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Featured Videos​

Podcasts

Sorry, we couldn't find any posts. Please try a different search.

  • All
  • Application Security
  • Blog
  • CVE Vulnerability Alerts
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Identity and Access Management
  • Information Security
  • Network Security
  • News
  • Phishing
  • Podcasts
  • Product Reviews
  • Ransomware
  • Ransomware Victims
  • Resources
  • Security Spotlight
  • Sponsored
  • Threat Actors
  • Threat Actors
  • Threat Detection Tools
Remote Desktop Protocol (RDP): A Double-Edged Sword for IT Teams
Secure your Remote Desktop Protocol (RDP) with these essential tips. Learn how to mitigate risks and protect your systems from cyberattacks targeting RDP vulnerabilities.
Attackers Abuse Google OAuth in Sophisticated DKIM Replay Phishing Scheme
Attackers exploited Google’s OAuth and DKIM signing process to send phishing emails that appeared authentic, bypassing traditional security checks and targeting unsuspecting recipients.
MGM Resorts to Pay $45 Million in Data Breach Settlement Covering 2019 and 2023 Incidents
MGM Resorts will pay $45 million to settle a lawsuit over data breaches in 2019 and 2023, offering up to $75 per affected individual.
State-Backed Threat Actors Adopt ClickFix Social Engineering in Espionage Campaigns
State-backed hackers from North Korea, Iran, and Russia are now using ClickFix, a social engineering method that tricks users into manually executing malware payloads.
New Android Malware ‘SuperCard X’ Enables NFC Relay Attacks for Payment Card Theft
A new Android malware called SuperCard X enables NFC relay attacks by stealing card data via fake banking support calls and emulating it on attacker ...
Interlock Ransomware Gang Deploys ClickFix Attacks Using Fake IT Tools to Compromise Networks
Interlock ransomware operators now use ClickFix attacks with fake IT tools to deploy malware, exfiltrate data, and encrypt systems, targeting corporate environments through social engineering. ...
Critical Security Flaw in Asus AiCloud Routers Prompts Urgent Firmware Update
Asus urges immediate firmware updates after a critical security flaw in AiCloud routers is discovered, allowing unauthorized function execution via crafted remote requests.
This Week In Cybersecurity: 14th April to 18th April
Sure! Here's a 25-word excerpt summarizing the entire newsletter: **Widespread service outages, ransomware attacks, zero-day exploits, and data breaches impacted major platforms including Jira, Binance, ...
Ahold Delhaize Data Breach Confirmed After INC Ransomware Claims Responsibility
Ahold Delhaize confirms data theft from U.S. systems after INC Ransom's cyberattack. Investigation continues as stolen files appear on a dark web extortion site.
Legends International Confirms Data Breach Following Cyberattack in November 2024
Legends International disclosed a data breach affecting venue visitors and employees after a November 2024 cyberattack. The breach involved unauthorized access and data exfiltration.
Google Faces £5 Billion UK Antitrust Lawsuit Over Search Advertising Practices
Google has been hit with a £5 billion antitrust lawsuit in the UK, alleging it used its dominance to inflate search advertising prices for British ...
Jira Down, Atlassian Users Face Widespread Service Disruption
Atlassian's Jira platform is experiencing a global outage, affecting multiple products and causing significant disruptions for enterprise users.
UK Law Firm Fined £60,000 Over Ransomware Data Breach That Exposed Sensitive Case Files
DPP Law was fined £60,000 after a ransomware data breach exposed sensitive client data, due to outdated systems, delayed reporting, and lack of cybersecurity controls. ...
Over 16,000 Fortinet Devices Compromised via Symlink Backdoor Exploit
Over 16,000 Fortinet devices have been compromised via a symlink backdoor, allowing persistent read-only access to sensitive files despite applied patches.
Fake Binance Installers Spreading Malware in New Crypto -Themed Malvertising Campaign
Cybercriminals are using fake Binance and TradingView installers to deliver stealthy malware that steals browser credentials and disables system security settings.
Pennsylvania State Education Association Data Breach Exposes Over 500,000 Individuals
Class Action Lawsuit Filed Over Delayed Response to Pennsylvania State Education Association Data Breach
Inside the Breach: What Recent Cyberattacks Reveal About Your Data Security
Cyberattacks are no longer rare shocks—they’re a constant drumbeat in the background of our digital lives. In this episode, we take you on a deep ...
MedEx Ambulance Data Breach: 118,000 Patient Records Exposed
MedEx ambulance service confirms a breach impacting 118,418 patients. Sensitive personal, medical, and financial data was exposed, adding to the expanding Landmark Admin data breach ...
Endue Software Data Breach Exposes Health Information of Over 118,000 Patients Across U.S. Infusion Centers
Endue Software confirms a breach impacting 118,000 individuals, with sensitive healthcare data compromised. The incident adds to ongoing threats across the U.S. healthcare sector.
4chan Offline After Cyberattack: Hackers Claim Full Admin Access and Leak Internal Data
4chan suffered a major cyberattack on April 14, 2025, with hackers leaking admin tools, emails, and source code while the site remains intermittently offline.