Cyber Security
Roundcube 1.6.20 and 1.7.5 Fix 20 Flaws, Including IMAP Injection
Citizen Lab Confirms Pegasus on Belgrade Rector’s Phone Before Vote
AIA0001 Hacker Uses AI Agents to Breach 100+ Company Websites
Parkview Health Disables Network After Suspicious Activity
Plex2Shell Exploit Chain Hits Plex Servers a Day After PoC Release
Microsoft Confirms Windows Update Breaks Exchange Sign-In, Mail Flow
OpenCode Console Breach May Have Exposed Saved AI Provider API Keys
ConnectWise Cloud Backup Stays Offline After 173 Tenants Hit
Unpatched Broadcom WPS Flaw Lets Nearby Attackers Root Routers
Drupal Patches Two Critical RCE Flaws, Warns Exploits Could Follow
Trojanized Rank Math SEO PRO 3.0.123 Backdoors WordPress Sites
Apache Fixes 12 Kylin Flaws, Including Critical SQL Injection
CISA Flags dcm4chee Archive Flaws and Unpatched EseeCloud Cameras
Infinity Core Research Publishes Exploits for Six Linux Kernel Flaws
California Student Records Exposed in ETS SFTP Breach
Frontier Pays $625,000 to Connecticut Over 2024 Data Breach
Interpol Operation in 17 Countries Leads to 95 Arrests
Rhysida Lists Anne Arundel County Data for Sale at 25 Bitcoin
China-Linked Armory Castle Exploited BeyondTrust Zero-Day
BAE Systems Cyberattack Halts US Federal Bankruptcy Notices
Citizen Lab: AdFection Spyware Hit Al Jazeera Through Ad Networks
CERT-In: AI Agents in Testing Reached Live Indian Systems
PwnEscape Linux Kernel Flaw Lets Guest VMs Read Host Memory
Fake Chrome App With 100,000 Downloads Slipped Onto Google Play
Chrome 155 Patches 10 Flaws, Including Critical Prerender Bug
Mitsubishi Patches ICONICS Suite Flaws; Legacy Products Get No Fix
Progress Patches 12 High-Severity MOVEit Transfer Vulnerabilities
AWS Patches Critical Amazon Neptune Flaw Rated CVSS 9.9
Backuply WordPress Plugin SQL Injection Enables Site Takeover
Aoki Infostealer Now Steals API Keys From AI Coding Assistants

Sorry, we couldn't find any posts. Please try a different search.

Application Security
TeamUpdraft Breach Lets Attackers Backdoor WordPress Sites
Cybersecurity
Rhysida Lists Anne Arundel County Data for Sale at 25 Bitcoin
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed
Cybersecurity
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed

TOP CYBERSECURITY HEADLINES

This Week’s Security Spotlight

Application Security
Siemens Software Center Flaw Exploited in ROMULUS ClickFix Attacks
Application Security
Microsoft Confirms Windows Update Breaks Exchange Sign-In, Mail Flow
CVE Vulnerability Alerts
AWS Patches Critical Amazon Neptune Flaw Rated CVSS 9.9
CVE Vulnerability Alerts
Cisco Secure Email Gateway Zero-Day CVE-2026-76519 Exploited
Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Featured Videos​

Podcasts

Sorry, we couldn't find any posts. Please try a different search.

  • All
  • Application Security
  • Blog
  • CVE Vulnerability Alerts
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Identity and Access Management
  • Information Security
  • Network Security
  • News
  • Phishing
  • Podcasts
  • Product Reviews
  • Ransomware
  • Ransomware Victims
  • Resources
  • Security Spotlight
  • Sponsored
  • Threat Actors
  • Threat Actors
  • Threat Detection Tools
Blackwood Hackers Use AitM to Hijack WPS Office Update and Install NSPX30 Malware
The ‘Blackwood hackers’ have been engaging in cyberespionage attacks since 2018 and employs a highly sophisticated malware called NSPX30. Interestingly, the NSPX30 malware is built ...
Hackers Stole Raw Genotype Data, Health Reports in the 23andMe Data Breach
Raw genotype data of almost 5.1 million people was stolen in the 23andMe Data Breach that went unnoticed for months.   23andMe Data Breach Gave ...
HPE Hacked by Russian Hacker Group ‘Midnight Blizzard’ that Hacked Microsoft
The HPE hack was attributed to a group of suspected Russian hackers known as Midnight Blizzard, also referred to as Cozy Bear, APT29, and Nobelium. ...
Equilend Cyberattack Brings the Financial Tech Firm Down, Trades with Systems Offline
The EquiLend Cyberattack has forced the loan lending firm to trade manually with systems going offline. Lockbit ransomware gang is said to be behind the ...
Bucks County Cybersecurity Incident Disrupts Computer-Aided Dispatch System
The Bucks County Cybersecurity Incident impacted the county’s computer-aided dispatch (CAD) system leading to suspension of 911 call automation. Authorities in Bucks County, Pennsylvania, have ...
Jason’s Deli Breach Exposes Data of Over 350K Users in Credential Stuffing Attack
Jason’s Deli has recently discovered a data breach that has affected its online platform. In notifications sent to customers, the company has informed them that ...
Mother of All Breaches (MOAB) Exposes 26 Billion Records
The recently discovered supermassive leak is an extensive collection of data from various past breaches. It includes a staggering 12 terabytes of information, encompassing a ...
Veolia North America Water Service Provider Hit by Ransomware Attack
Veolia North America faced a Ransomware Attack that caused disruptions to the bill payment systems. The Veolia ransomware attack forced the organization to shut down ...
10 Common Types of Cyber Attacks and How to Prevent Them
The digital age has brought convenience and connection, but it’s also opened the door to a growing threat: cyberattacks. These malicious attempts can steal data, ...
SEC Says Sim Swapping Attack Caused X Account Hack
SEC SIM swapping attack reportedly the cause of SEC X account hack that resulted in a fake Bitcoin ETF Approval tweet. The U.S. Securities and ...
loanDepot Cyberattack Results in Data Breach of 16.6 Million
The mortgage lender has confirmed that loanDepot cyberattack resulted in a Data Breach that compromised sensitive information of 16.6 Million people. loanDepot, a mortgage lender, ...
Ukraine’s Monobank DDoS Attack Hits ‘Non Stop’ and Cripples Bank’s Operations
Over the weekend, Monobank, a prominent Ukraine’s largest mobile-only bank, experienced a distributed denial-of-service (DDoS) attack. This Monobank DDoS Attack is part of a series ...
CISA Issues Emergency Directive on Ivanti Zero-Day, Demands Immediate Action from Federal Agencies
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency directive to Federal Civilian Executive Branch (FCEB) agencies. The directive aims to address two ...
Tietoevry Ransomware Attack Causes Widespread Disruptions for Swedish Customers, Akira Ransomware Behind the Incident
Tietoevry, a Finnish IT services and enterprise cloud hosting provider, experienced a ransomware attack that affected their cloud hosting customers in one of their data ...
This Week in Cybersecurity: 15th Jan – 19th Jan: 178K SonicWall Firewalls Fell to DoS and RCE Attacks
Over 178K SonicWall Firewalls Exposed to DoS and RCE Attacks 178k SonicWall firewalls are exposed online and vulnerable to DoS and potential RCE attacks due ...
Trezor Security Breach Affects 66k Users in a Phishing Scam
Trezor Security Breach: What Happened? Trezor, a manufacturer of hardware wallets, recently reported a security breach. Approximately 66,000 user’s contact information was exposed due to ...
Ukraine Blackjack Hackers Steal 500 Russian MoD’s Objects
According to sources from RBC-Ukraine, Ukrainian Blackjack Hackers, who are believed to be associated with the Security Service of Ukraine (SSU), have successfully breached a ...
Kansas State University Cyberattack Disrupts Email, Phone, Payment Systems
The Kansas State University Cyberattack has disrupted IT network and services including Email, Phone and Payment Systems. Kansas State University cybersecurity incident has caused disruptions ...
Bigpanzi Botnet Targets 170k Android TV Set Top Boxes with Bigpanzis Custom Malware
The Bigpanzi cybercrime gang has been generating substantial profits by infecting Android TV, Android TV boxes and various eCos set-top boxes with Bigpanzi botnet malware, ...
Google Discreetly Changes Chrome’s Incognito Warning Amidst the Google Class Action lawsuit
Google recently made a quiet update to the description of its private browsing feature in the latest Canary build of Google Chrome Browser, version 122.0.6251.0. ...