Cyber Security
Sandworm Fake Job Interview Campaign Targets Ukrainian IT Workers
Kimwolf v7 Android Botnet Evades DDoS Mitigation Using HTTP/2 C2
SharePoint RCE CVE-2026-55040 First Confirmed Ransomware Exploit
Polish Power Plant Turbine Stopped After Cellular ICS Network Breach
Metabase Zero-Day SQL Injection Exploited Against Framework, Tally
Attackers Reach Managed Endpoints as N-able Ships N-central Hotfix 2
CISA Adds Exploited Kemp LoadMaster Command Injection to KEV
Atlassian Rovo One-Click Flaw Exposes Jira, Confluence Data
CSS Attacks Break Webmail Boundaries to Capture Passwords, Tokens
Head Mare Breaches TrueConf Servers, Trojanizes Client Installers
Belgian Connective eID Flaws Let Websites Forge Signatures
Solidity Pro VS Code Extensions Steal Wallets, API Keys From Devs
OpenAI Pauses Astra Work After Evaluation Flags Cyber Capabilities
AitM Phishing Campaign Steals Microsoft 365 Finance Emails
Swiss Government SharePoint Breach Compromised 200 Accounts
UNC6671 Extortion Group Rebrands After Targeting Hedge Funds
3.8 Million Impacted by Unlimited Technology Systems Breach
4,407 Rockwell PLCs Exposed Online, 22 in Water Cities
Zapscape KVM Flaw Lets Privileged L1 Guest Escape to Host
TONTOU Interrupt Injection Bypasses Spectre v2 Fixes on AMD Zen 2
NatJack Attacks Hijack TCP Sessions and Spoof DNS via NAT
Claude Code and Gemini CLI Flaws Expose CI Workflow Secrets
AI-Assisted HTTP Terminator Finds Apache Traffic Server Zero-Day
TeamPCP Tied to Redis Attacks Dating Back to 2020
CryptoJS Weak RNG Behind $5.7M in Five Wallet App Drains
iCloud Private Relay WebKit Bypasses Expose Users’ Real IPs
ClickFix Campaign Pushes Go-Based macOS Crypto Drainer
China Launches Probe Into Palo Alto Networks Product Security
Attackers Compile khunt Inside Oracle to Reach Windows SYSTEM
Zbtlink Routers Ship With ENDLESSDOORS Backdoor Opening Root Shells
Ransomware Attacks Continue to Take a Major Toll on Critical Infrastructure Organizations
Blog
Ransomware Attacks Continue to Take a Major Toll on Critical Infrastructure Organizations
Ransomware attacks targeting critical national infrastructure (CNI) organizations have reached alarming heights, with costs soaring to unprecedented levels. A new ...
Clearview AI Fined €30.5 Million for Unlawful Data Collection
Cybersecurity
Clearview AI Fined €30.5 Million for Unlawful Data Collection
Dutch Data Protection Authority Takes Action Against Clearview AI Facial Recognition Company
VK Data Leak Exposes 390 Million Users: HikkI-Chan Strikes Again
News
VK Data Leak Exposes 390 Million Users: HikkI-Chan Strikes Again
HikkI-Chan Claims Responsibility for VK Data Breach
North Korean Hackers Target Job Seekers with Fake FreeConference App: Contagious Interview Campaign
Cybersecurity
North Korean Hackers Target Job Seekers with Fake FreeConference App: Contagious Interview Campaign
North Korean threat actors, known for their sophisticated cyberattacks, have been targeting job seekers with a fake Windows video conferencing application disguised as FreeConference.com.
What are DDoS Attacks - A Complete Guide
Blog
What is a DDoS Attack – A Complete Guide
This comprehensive guide delves into the intricacies of DDoS attacks, their mechanisms, common types, and effective mitigation strategies, empowering enterprise businesses to safeguard their online ...
Verkada to Pay $2.95 Million for Security Failures Leading to Breaches
Cybersecurity
Verkada to Pay $2.95 Million for Security Failures Leading to Breaches
Security Camera Vendor Faces FTC Action for Lax Security Practices
CBIZ Discloses Data Breach Affecting Nearly 36,000 Individuals
News
CBIZ Discloses Data Breach Affecting Nearly 36,000 Individuals
CBIZ Benefits & Insurance Services (CBIZ), a leading provider of financial, benefits, and insurance services, has disclosed a data breach that impacted nearly 36,000 individuals
TfL Cyberattack: Transport for London Under Attack
News
TfL Cyberattack: Transport for London Under Attack
Transport for London (TfL), the city's transportation authority, is currently investigating an ongoing cyberattack. While the attack is ongoing, TfL has assured the public that ...
This Week in Cybersecurity: 26th August to 30th August, BlackSuit Ransomware Stole Data
Cybersecurity
This Week in Cybersecurity: 26th August to 30th August, BlackSuit Ransomware Stole Data
BlackSuit Ransomware disrupts software vendor, Cyberattack on airport, nonprofit and government websites, credit union customers impacted by data breach.
DICK'S Sporting Goods Cyberattack Shuts Down Email and Locks Employee Accounts
Cybersecurity
DICK’S Sporting Goods Cyberattack Shuts Down Email and Locks Employee Accounts
A Major Data Breach Impacts the Retail Giant DICK'S Sporting Goods in a Cyberattack
North Korean Hackers Exploit Chrome Zero-Day to Deploy Rootkit
Cybersecurity
North Korean Hackers Exploit Chrome Zero-Day to Deploy Rootkit
North Korean hackers have successfully exploited a recently patched Google Chrome zero-day vulnerability (CVE-2024-7971) to deploy the FudModule rootkit.
Voldemort Malware: A New Threat Abusing Google Sheets for Data Exfiltration
Cybersecurity
Voldemort Malware: A New Threat Abusing Google Sheets for Data Exfiltration
A new malware campaign has emerged, targeting organizations across the globe with a previously undocumented backdoor named "Voldemort."
Park 'N Fly Data Breach Impacts Nearly a Million Customers: Sensitive Information Compromised in Cyberattack
News
Park ‘N Fly Data Breach Impacts Nearly a Million Customers: Sensitive Information Compromised in Cyberattack
Park 'N Fly, a Canadian airport parking service, has confirmed a data breach affecting nearly a million customers. The cyberattack, occurring between July 11-13, 2024, ...
Cucamonga Valley Water District Hit by Ransomware Attack
News
Cucamonga Valley Water District Hit by Ransomware Attack
The Cucamonga Valley Water District (CVWD) is investigating a ransomware attack that paralyzed its phone system earlier this month, preventing customers from making phone payments. ...
US Marshals Service Disputes Ransomware Gang's Breach Claims
News
US Marshals Service Disputes Ransomware Gang’s Breach Claims
US Marshals Service Denies Recent Breach
BlackSuit Ransomware Exposes Data of 950,000 Individuals in Software Vendor Breach
News
BlackSuit Ransomware Exposes Data of 950,000 Individuals in Software Vendor Breach
A Major Data Breach Hits Atlanta-Based Software Solutions Provider, BlackSuit Ransomware Exposes Data of 950,000.
McDonald's Instagram Hacked in $700,000 Fake Crypto Scheme
News
McDonald’s Instagram Hacked in $700,000 Fake Crypto Scheme
A brazen cyberattack targeting McDonald's social media accounts has resulted in a $700,000 loss for unsuspecting investors.
Connecticut Nonprofit Pays $1 Million Ransom After Sophisticated Cyberattack
News
Connecticut Nonprofit Pays $1 Million Ransom After Sophisticated Cyberattack
A Connecticut-based nonprofit, the National Association for Amateur Radio (ARRL), has fallen victim to a sophisticated cyberattack that cost them $1 million in ransom.
Sea-Tac Airport Hit by Cyberattack, Disrupting Services and Websites
News
Sea-Tac Airport Hit by Cyberattack, Disrupting Services and Websites
Airport and Port of Seattle Systems Down, Baggage Handling Disrupted after Sea-Tac Airport faces Cyberattack.
Patelco Credit Union Suffers Ransomware Data Breach, Affecting 726,000 Customers
News
Patelco Credit Union Suffers Ransomware Data Breach, Affecting 726,000 Customers
Patelco Credit Union Faces Ransomware Attack and Data Theft
Application Security
SAP Patches Zero-Day in Commerce Cloud Data Hub Adapter
Cybersecurity
Gunra Ransomware Exploits Fortinet and Schneider Flaws for MFA Bypass
Application Security
SharePoint RCE CVE-2026-55040 First Confirmed Ransomware Exploit

TOP CYBERSECURITY HEADLINES

This Week’s Security Spotlight

Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Featured Videos​

Podcasts

Sorry, we couldn't find any posts. Please try a different search.

  • All
  • Application Security
  • Blog
  • CVE Vulnerability Alerts
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Identity and Access Management
  • Information Security
  • Network Security
  • News
  • Phishing
  • Podcasts
  • Product Reviews
  • Ransomware
  • Ransomware Victims
  • Resources
  • Security Spotlight
  • Sponsored
  • Threat Actors
  • Threat Actors
  • Threat Detection Tools
Akira Ransomware: The Extortion Ghost in a Shell
Akira has targeted a range of organizations, including universities (Stanford), major IT service providers (Tietoevry), and numerous businesses across various sectors. Critical infrastructure, including healthcare ...
9 Million Downloads, Now Banned: VSCode Extensions Under Fire
In a shocking move, Microsoft has banned the popular Material Theme – Free and Material Theme Icons – Free extensions from the Visual Studio Marketplace, ...
EncryptHub Ransomware and Infostealer Campaign Targets 618 Organizations Globally
EncryptHub Breach Affects 618 Organizations Hit Using Infostealers and Ransomware
Genea IVF Data Breach Claimed by Termite Ransomware Gang
Australian IVF provider Genea suffered a major data breach. The Termite ransomware gang stole 940GB of sensitive patient data. This includes medical histories, personal details, ...
Lazarus Group Stole $1.5 Billion in Bybit Hack by Exploiting a Safe{Wallet} Developer Machine
Lazarus hackers stole $1.5 billion from Bybit by compromising a Safe{Wallet} developer machine. The attack involved malicious JavaScript, highlighting vulnerabilities in multisig wallet platforms.
Black Basta Ransomware Costs Southern Water £4.5 Million
Southern Water reveals a £4.5 million cost from a Black Basta ransomware attack in February 2024. The attack, while not impacting operations, triggered significant expenses ...
Jasper Network Breach: City Investigates Cybersecurity Incident
Jasper, Alabama, is investigating a network security breach. Experts are working to determine the extent of the unauthorized access. No personal data is believed compromised.
Bybit’s $1.5 Billion Ether Theft: Analysis, investigation and finds
Bybit, a cryptocurrency exchange, experienced a massive security breach resulting in a $1.46 billion loss, the largest crypto hack in history. The attack involved social ...
GitVenom Malware Campaign Targets Crypto Users via GitHub
The GitVenom malware campaign uses hundreds of compromised GitHub repositories to distribute info-stealers, RATs, and clipboard hijackers, stealing cryptocurrency and credentials.
Auto-Color Linux Backdoor Malware Targets Governments and Universities
A new, highly evasive Auto-Color Linux backdoor targets North American and Asian governments and universities. The malware uses custom encryption and rootkit-like features for persistence.
Data Breach at DISA Impacts 3.3 Million Compromising Social Security Numbers and Financial Data
DISA Global Solutions, a US drug testing firm, suffered a data breach exposing the sensitive data of 3.3 million individuals. Social Security numbers and financial ...
Have You Been Pwned As Well? The Data Breach Notification Service Adds 284 Million Accounts as Stolen by Infostealer Malware
Have I Been Pwned added 284 million accounts compromised by infostealer malware found on a Telegram channel. The breach includes emails, passwords, and website data.
Orange Group Confirms Data Breach, Hacker Leaks Internal Documents
A hacker leaked thousands of Orange Group's internal documents. The breach compromised user records and employee data. Orange Group confirmed the incident.
Boys & Girls Clubs of Tennessee Valley Data Breach Exposes Sensitive Information
The Boys & Girls Clubs of the Tennessee Valley experienced a data breach between November 19-23, 2024, exposing personal data including Social Security numbers and ...
IT Service Provider Hack in Russia Puts Financial Sector on High Alert
Russia's financial sector faces a significant threat after a major IT service provider, LANIT, was hacked. Authorities urge password and credential changes.
Lucent Health Data Breach: Law Firm Investigates Legal Claims
A data breach at Lucent Health exposed sensitive personal information, including Social Security numbers and medical records. The Murphy Law Firm is investigating legal claims ...
Genea IVF Clinic Data Leak: Medical Records, Addresses, and Phone Numbers at Risk
Genea, a major Australian IVF provider, suffered a data breach on February 14th. Sensitive patient data, including medical records and contact information, was compromised. The ...
CISA Warns of Craft CMS Code Injection Flaw
CISA warns of an actively exploited Craft CMS code injection flaw (CVE-2025-23209), urging users to upgrade to patched versions 5.5.8 and 4.13.8 or later.
Vivifi Data Leak: Millions of Loan Applicants’ Data Exposed
A massive vivifi data leak exposed 36 million files containing sensitive personal data of Indian loan applicants, including passports and bank details, due to a ...
Bybit Hack: $1.5 Billion Ethereum Theft in Biggest Crypto Heist Ever
Hackers stole $1.5 billion in Ethereum from Bybit, the world's second-largest crypto exchange. The heist is the largest digital theft ever recorded. Bybit is offering ...