Cyber Security
Roundcube 1.6.20 and 1.7.5 Fix 20 Flaws, Including IMAP Injection
Citizen Lab Confirms Pegasus on Belgrade Rector’s Phone Before Vote
AIA0001 Hacker Uses AI Agents to Breach 100+ Company Websites
Parkview Health Disables Network After Suspicious Activity
Plex2Shell Exploit Chain Hits Plex Servers a Day After PoC Release
Microsoft Confirms Windows Update Breaks Exchange Sign-In, Mail Flow
OpenCode Console Breach May Have Exposed Saved AI Provider API Keys
ConnectWise Cloud Backup Stays Offline After 173 Tenants Hit
Unpatched Broadcom WPS Flaw Lets Nearby Attackers Root Routers
Drupal Patches Two Critical RCE Flaws, Warns Exploits Could Follow
Trojanized Rank Math SEO PRO 3.0.123 Backdoors WordPress Sites
Apache Fixes 12 Kylin Flaws, Including Critical SQL Injection
CISA Flags dcm4chee Archive Flaws and Unpatched EseeCloud Cameras
Infinity Core Research Publishes Exploits for Six Linux Kernel Flaws
California Student Records Exposed in ETS SFTP Breach
Frontier Pays $625,000 to Connecticut Over 2024 Data Breach
Interpol Operation in 17 Countries Leads to 95 Arrests
Rhysida Lists Anne Arundel County Data for Sale at 25 Bitcoin
China-Linked Armory Castle Exploited BeyondTrust Zero-Day
BAE Systems Cyberattack Halts US Federal Bankruptcy Notices
Citizen Lab: AdFection Spyware Hit Al Jazeera Through Ad Networks
CERT-In: AI Agents in Testing Reached Live Indian Systems
PwnEscape Linux Kernel Flaw Lets Guest VMs Read Host Memory
Fake Chrome App With 100,000 Downloads Slipped Onto Google Play
Chrome 155 Patches 10 Flaws, Including Critical Prerender Bug
Mitsubishi Patches ICONICS Suite Flaws; Legacy Products Get No Fix
Progress Patches 12 High-Severity MOVEit Transfer Vulnerabilities
AWS Patches Critical Amazon Neptune Flaw Rated CVSS 9.9
Backuply WordPress Plugin SQL Injection Enables Site Takeover
Aoki Infostealer Now Steals API Keys From AI Coding Assistants

Sorry, we couldn't find any posts. Please try a different search.

Application Security
TeamUpdraft Breach Lets Attackers Backdoor WordPress Sites
Cybersecurity
Rhysida Lists Anne Arundel County Data for Sale at 25 Bitcoin
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed
Cybersecurity
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed

TOP CYBERSECURITY HEADLINES

This Week’s Security Spotlight

Application Security
Siemens Software Center Flaw Exploited in ROMULUS ClickFix Attacks
Application Security
Microsoft Confirms Windows Update Breaks Exchange Sign-In, Mail Flow
CVE Vulnerability Alerts
AWS Patches Critical Amazon Neptune Flaw Rated CVSS 9.9
CVE Vulnerability Alerts
Cisco Secure Email Gateway Zero-Day CVE-2026-76519 Exploited
Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Featured Videos​

Podcasts

Sorry, we couldn't find any posts. Please try a different search.

  • All
  • Application Security
  • Blog
  • CVE Vulnerability Alerts
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Identity and Access Management
  • Information Security
  • Network Security
  • News
  • Phishing
  • Podcasts
  • Product Reviews
  • Ransomware
  • Ransomware Victims
  • Resources
  • Security Spotlight
  • Sponsored
  • Threat Actors
  • Threat Actors
  • Threat Detection Tools
More Class Action Lawsuits Pile up Over AT&T 2024 Data Breach That Impacted Over 70 Million Customers
In late March 2024, telecommunications giant AT&T announced a major data breach that compromised the personal information of approximately 73 million current and former customers. ...
Connexin Data Breach Lawsuit Reaches $4 Million Settlement
The proposed class action lawsuit settlement has been reached in the Connexin Data Breach that compromised the personal information of potentially thousands of individuals. What ...
When Credentials Fail: How Authentication Failure Led to the Change Healthcare Ransomware Attack
As ransomware attacks continue to grow in frequency and sophistication, the cybersecurity of enterprise networks is constantly being challenged. While multilayered defenses are indispensable, recent ...
This Week in Cybersecurity – April 15th to April 19th: Giant Tiger Data Breached
Giant Tiger Data Breached, RansomHub Ransomware Leaks Change Healthcare data, Cerebral Settles Facebook Pixel Data Case at $7 Million  Giant Tiger Data Breached, 2.8M Records ...
Identity Management Giant Okta Warns of Credential Stuffing Attacks
Identity and access management provider Okta has warned customers of a significant uptick in credential stuffing attacks targeting their accounts in recent weeks. Credential stuffing ...
Kaiser Data Breach May Have Exposed Data of Over 13 Million Patients
The Kaiser Permanente data breach leaked personal information on around 13.4 million individuals across the United States. Details of the Kaiser Data Breach 2024 In ...
Georgia County Hit with Ransomware Attack Disrupting Voter Registration System
On April 22nd, 2024, Coffee County, Georgia fell victim to a sophisticated ransomware attack that crippled many of the county’s computer systems and disrupted access ...
Patients Data Exposed in Phishing Attack Targeting LA County Health Services
The Los Angeles County Department of Health Services (LACDHS) recently disclosed a major data breach impacting an unknown number of patients after their personal and ...
This Week in Cybersecurity: April 22 – April 26, UnitedHealth Group Pays Ransom
UnitedHealth Group Pays Ransom, Hackers leak Code of El Salvador’s Chivo Wallet, Volkswagen Breached, Synlab Italia hit by ransomware, Frontier Communications Cyberattack Disrupts IT Systems ...
ArcaneDoor Hackers Exploit Cisco Zero-Days to Breach Government Networks
Cisco has warned of a sophisticated state-backed hacking group known as UAT4356 exploiting two zero-day vulnerabilities in Cisco firewall devices since November 2023 to breach ...
Hackers leak Code of El Salvador’s Official State Bitcoin Wallet “Chivo”
In early April, the hacker group CiberInteligenciaSV leaked the complete database of Chivo users. Since then, they have been gradually releasing the code of the ...
What are Insider Threats: Preventing Cyber Threats from Malicious Insiders
Organizations face cybersecurity threats both from external sources and from within their own ranks. Insider threats, in particular, have become a growing concern for businesses ...
UnitedHealth Group Confirms Ransom Payment to Prevent Data Leak
The UnitedHealth Group has recently acknowledged that it made a payment to cybercriminals to safeguard sensitive data that was stolen during the Optum ransomware attack ...
Hackers Exploit eScan Antivirus Updates to Drop GuptiMiner Malware
North Korean hackers have recently been utilizing the updating mechanism of eScan antivirus software to infiltrate large corporate networks. They achieve this by deploying GuptiMiner ...
Volkswagen Breached by Chinese Hackers
Volkswagen Group has experienced a huge security breach, with reports indicating that over 19,000 intellectual property documents were stolen by attackers. German media suggests that ...
Synlab Italia Forced to Halt Operations After a Ransomware Attack
Synlab Italia, a subsidiary of the global Synlab group, has temporarily halted its medical diagnostic and testing services due to a ransomware attack. Synlab Ransomware ...
APT28 Uses GooseEgg to Exploit Windows Flaw
Microsoft has issued a warning regarding the activities of the APT28 threat group. APT28 is currently exploiting a vulnerability in the Windows Print Spooler to ...
Frontier Communications Cyberattack Disrupts IT Systems
Frontier Communications, a prominent American telecom provider known for its high-speed internet services, recently experienced a cyberattack. To contain the breach, certain systems were temporarily ...
Akira Ransomware Extorted $42 Million from 250+ Victims: FBI and CISA Issues Joint Advisory
According to a joint advisory from the FBI, CISA, Europol’s European Cybercrime Centre (EC3), and the Netherlands’ National Cybersecurity Centre (NCSC-NL), the Akira ransomware operation ...
FIN7 Attempts Phishing at American Automaker’s IT Staff
The financially motivated threat actor known as FIN7 recently executed a targeted attack against a prominent U.S. car manufacturer. Their modus operandi involved employing spear-phishing ...