Cyber Security
Roundcube 1.6.20 and 1.7.5 Fix 20 Flaws, Including IMAP Injection
Citizen Lab Confirms Pegasus on Belgrade Rector’s Phone Before Vote
AIA0001 Hacker Uses AI Agents to Breach 100+ Company Websites
Parkview Health Disables Network After Suspicious Activity
Plex2Shell Exploit Chain Hits Plex Servers a Day After PoC Release
Microsoft Confirms Windows Update Breaks Exchange Sign-In, Mail Flow
OpenCode Console Breach May Have Exposed Saved AI Provider API Keys
ConnectWise Cloud Backup Stays Offline After 173 Tenants Hit
Unpatched Broadcom WPS Flaw Lets Nearby Attackers Root Routers
Drupal Patches Two Critical RCE Flaws, Warns Exploits Could Follow
Trojanized Rank Math SEO PRO 3.0.123 Backdoors WordPress Sites
Apache Fixes 12 Kylin Flaws, Including Critical SQL Injection
CISA Flags dcm4chee Archive Flaws and Unpatched EseeCloud Cameras
Infinity Core Research Publishes Exploits for Six Linux Kernel Flaws
California Student Records Exposed in ETS SFTP Breach
Frontier Pays $625,000 to Connecticut Over 2024 Data Breach
Interpol Operation in 17 Countries Leads to 95 Arrests
Rhysida Lists Anne Arundel County Data for Sale at 25 Bitcoin
China-Linked Armory Castle Exploited BeyondTrust Zero-Day
BAE Systems Cyberattack Halts US Federal Bankruptcy Notices
Citizen Lab: AdFection Spyware Hit Al Jazeera Through Ad Networks
CERT-In: AI Agents in Testing Reached Live Indian Systems
PwnEscape Linux Kernel Flaw Lets Guest VMs Read Host Memory
Fake Chrome App With 100,000 Downloads Slipped Onto Google Play
Chrome 155 Patches 10 Flaws, Including Critical Prerender Bug
Mitsubishi Patches ICONICS Suite Flaws; Legacy Products Get No Fix
Progress Patches 12 High-Severity MOVEit Transfer Vulnerabilities
AWS Patches Critical Amazon Neptune Flaw Rated CVSS 9.9
Backuply WordPress Plugin SQL Injection Enables Site Takeover
Aoki Infostealer Now Steals API Keys From AI Coding Assistants

Sorry, we couldn't find any posts. Please try a different search.

Application Security
TeamUpdraft Breach Lets Attackers Backdoor WordPress Sites
Cybersecurity
Rhysida Lists Anne Arundel County Data for Sale at 25 Bitcoin
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed
Cybersecurity
Gentlemen Ransomware Gang Claims MoneyGram Breach, Unconfirmed

TOP CYBERSECURITY HEADLINES

This Week’s Security Spotlight

Application Security
Siemens Software Center Flaw Exploited in ROMULUS ClickFix Attacks
Application Security
Microsoft Confirms Windows Update Breaks Exchange Sign-In, Mail Flow
CVE Vulnerability Alerts
AWS Patches Critical Amazon Neptune Flaw Rated CVSS 9.9
CVE Vulnerability Alerts
Cisco Secure Email Gateway Zero-Day CVE-2026-76519 Exploited
Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Featured Videos​

Podcasts

Sorry, we couldn't find any posts. Please try a different search.

  • All
  • Application Security
  • Blog
  • CVE Vulnerability Alerts
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Identity and Access Management
  • Information Security
  • Network Security
  • News
  • Phishing
  • Podcasts
  • Product Reviews
  • Ransomware
  • Ransomware Victims
  • Resources
  • Security Spotlight
  • Sponsored
  • Threat Actors
  • Threat Actors
  • Threat Detection Tools
Hackers Use Androxgh0st Malware Botnet to Steal AWS and Microsoft credentials: CISA and FBI Issues Warning
The FBI and Cybersecurity and Infrastructure Security Agency (CISA) have issued a warning about the Androxgh0st malware botnet. They have been conducting investigations to understand ...
Windows SmartScreen Vulnerability Exploited: Phemedrone Stealer Malware Used for Crypto Siphoning
A recent Crypto Siphoning malware campaign called Phemedrone has been discovered. Phemedrone is an information-stealing malware that takes advantage of a Microsoft Windows SmartScreen Vulnerability ...
Over 178K SonicWall Firewalls Exposed to DoS and RCE Attacks
Security researchers have discovered that more than 178k SonicWall firewalls are vulnerable to DOS and RCE attacks. This flaw was found in vulnerable SonicWall firewalls ...
Juniper Fixes Junos OS Critical RCE Vulnerability in its SRX and EX Devices
Juniper Networks has recently addressed a Critical RCE Vulnerability in their SRX Series firewalls and EX Series switches. This issue, labeled as CVE-2024-21591, is a ...
This Week in Cybersecurity: 8th Jan – 12th Jan – SEC X Account Hack Creates Chaos
US SEC X Account Hacked, Hackers Post Fake Bitcoin ETF Approval Tweet The U.S. Securities and Exchange Commission’s X account experienced a security breach. As ...
SEC Account Hack Again Catches News Spotlight Amidst Security Concerns
The recent SEC account hack on X has raised fresh concerns regarding the security of the social media platform. These concerns have been amplified since ...
10 Major Data Breaches and Cyber Attacks 2023
Cyber attacks today have become a daily occurrence in today’s hyperconnected world. With more users and devices getting online each day, there is an ever-increasing ...
Ivanti Critical EPM Bug Allows Hackers to Hijack EPM Devices
Ivanti has successfully addressed a critical remote code execution (RCE) vulnerability in its Endpoint Management software (EPM). The Ivanti critical EPM bug had the potential ...
US SEC’s X Account Hacked, Hackers Post Fake Bitcoin ETF Approval Tweet
The U.S. Securities and Exchange Commission’s X account experienced a security breach. As a result, a false Bitcoin ETF Approval Tweet on security exchanges was ...
LockBit Ransomware Claims Capital Health Attack, Threatens to Leak Sensitive Data
The LockBit ransomware group has acknowledged their involvement in the Capital Health attack that took place in November 2023. The adversaries are now issuing a ...
Ukrainian Hacker Group Takes Down Moscow ISP as a Revenge for Kyivstar Cyber Attack
A Ukrainian hacker group, believed to be connected to Ukraine’s intelligence took and carried out a destructive attack on the servers of a Moscow-based internet ...
Hackers Can Now Access Your Google Accounts Without Password
Security researchers have recently discovered a sophisticated hacking technique that enables cyber criminals to gain unauthorized entry into individuals’ Google accounts without passwords. In-depth analysis ...
CISA Identifies Actively Exploited Bugs in Chrome and Excel Parsing Library
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified two Actively Exploited Bugs in Chrome and Excel Parsing Library and has included them in ...
Mandiant Security Breached: Account on X Hacked for Crypto Scam
The X account of Mandiant, an American cybersecurity firm and subsidiary of Google, was compromised. The Mandiant Security Breach resulted in an unauthorized individual to ...
Russian Sandworm Hackers Lurked Inside KyivStar Systems in KyivStar Cyber Attack
The Russian Sandworm hackers successfully breached Kyivstar and stayed inside KyivStar systems for several months. Ukraine’s largest telecommunications service provider, in December, resulting in the ...
HealthEC Data Breach Exposes Data of Almost 4.5 Million Patients
HealthEC LLC, a New Jersey-based provider of health management solutions, has suffered a major data breach that exposed personally identifiable information of individuals who received ...
Orbit Chain Lost $86 Million in a Cross-Chain Bridge Exploit Attack
Orbit Chain Lost $86 Million in cryptocurrency, specifically Ether, Dai, Tether, and USD Coin. Orbit Chain is a blockchain platform that serves as a versatile ...
Victoria Court Hack Exposes Victorian Court Recordings: Sensitive Witness Testimonies Stolen
The Victoria Court Hack resulted in hackers gaining unauthorized access to the audio-visual network and stealing Victorian court recordings. The Victorian Court Cyber attack is ...
Ohio Lottery Cyber Attack: Another Cybersecurity Incident Claimed by DragonForce Ransomware
The Ohio Lottery cyber attack on Christmas Eve resulted in the shutdown of certain internal applications. While the exact details of the cybersecurity incident and ...
Eagers Automotive Cyberattack Forces the Company to Suspend Trades
Eagers Automotive cyberattack lead to a temporary suspension of trading on the stock exchange. Eagers Automotive operates a vast network of car dealerships across Australia ...