Cyber Security
Application Security
Critical Marimo Vulnerability Is Now Being Actively Exploited for Credential Theft
Marimo faces a severe RCE vulnerability allowing credential theft. Immediate action is crucial.
Cybersecurity
Cybercriminals Target Venice’s Flood Control Systems, Exposing Dangerous Gaps in Urban Security
Hackers have infiltrated Venice's crucial San Marco flood defenses, revealing vulnerabilities in operational technology.
CVE Vulnerability Alerts
Adobe Addresses Critical Flaw in Acrobat Reader with Emergency Updates
Adobe releases emergency patches to fix a critical flaw in Acrobat Reader actively exploited in the wild, CVE-2026-34621.
Application Security
Emerging Threats in Malware: Recent Developments in Software Vulnerabilities
New malicious npm packages, deceptive LNK files, and compromised servers illustrate evolving malware tactics.
Cybersecurity
U.S. Cybersecurity Agencies Warn of Rising Threats From Exposed Rockwell Automation PLCs
U.S. cybersecurity agencies warn of Iran-linked APTs exploiting exposed Rockwell PLCs, urging swift disconnection.
Application Security
CPUID Website Was Briefly Compromised to Spread Remote Access Trojan
Threat actors compromised the CPUID site for less than 24 hours, deploying a remote access trojan.
Cybersecurity
Atomic Stealer Exploits Script Editor in a New Attack Targeting macOS Users
Atomic Stealer malware targets macOS users, using Script Editor in campaigns exploiting ClickFix attack variations.
Cybersecurity
Chaos Malware Expands Its Reach to Cloud Deployments
Chaos malware is now targeting misconfigured cloud systems, moving beyond just routers and edge gear.
News
APT28 Deploys PRISMEX Malware Against Ukraine and Its Allies
Russian APT28 exploits spear-phishing in Ukraine with a novel malware, PRISMEX, harnessing advanced steganography and COM hijacking.
Cybersecurity
Seven Vulnerabilities Patched in OpenSSL, Several Enabling DoS Attacks
OpenSSL patches seven vulnerabilities, with several posing serious Denial of Service attack risks alongside a notable data leakage flaw.
Application Security
U.S. Agencies Given Four Days to Patch Critical Ivanti EPMM Vulnerability
CISA mandates U.S. agencies to patch critical Ivanti EPMM vulnerability within four days as active exploitation continues.
Cybersecurity
Critical RCE Flaw in Apache ActiveMQ Classic Went Undetected for 13 Years
A serious RCE flaw in Apache ActiveMQ Classic hid for 13 years, posing new risks.
Cybersecurity
A $30,000 AI GPU Still Loses to Consumer Hardware in Password Cracking
Investigating why consumer GPUs outperform a $30,000 AI GPU in password cracking.
Cybersecurity
Massachusetts Hospital Faces Service Interruptions Amid Cyberattack
Signature Healthcare hospital in Massachusetts was forced to cancel some services after a cyberattack disrupted operations.
Cybersecurity
FleetWave Users Left Without Service After Chevin Takes Platform Offline
A security incident results in major FleetWave outages across UK and US as Chevin takes affected platforms offline.
Cybersecurity
Authorities Crack a $45 Million Global Cryptocurrency Scam and Recover $12 Million
Global authorities dismantled a $45M crypto scam, rescuing $12M from fraudsters and aiding 20K affected wallets.
Application Security
EngageLab SDK Vulnerability Threatens Millions of Android Cryptocurrency Wallets
Vulnerability in EngageLab SDK put Android cryptocurrency wallets at risk, bypassing security sandbox protections.
Cybersecurity
Newly Discovered UAT-10362 Threat Cluster Aims at Taiwanese NGOs
UAT-10362 threatens Taiwanese NGOs with new LucidRook malware.
News
New Extortion Crew Uses Phishing to Breach High-Value Corporations
Emerging extortion crew targets corporations through sophisticated phishing schemes.
Application Security
Smart Slider 3 Pro Plugin Update System Was Hijacked to Push Backdoored Versions
Cybercriminals hijacked the Smart Slider 3 Pro plugin update system, pushing malicious versions loaded with multiple backdoors to WordPress and Joomla...
Cybersecurity
ShinyHunters Claims Breach of Florida DMV DAVID Database
Application Security
GoldFactory and Mantax Otax Target Indonesian Android Bank Users
CVE Vulnerability Alerts
Aurora Ransomware Operators Use Cursor AI to Execute Network Attacks
TOP CYBERSECURITY HEADLINES
Application Security
UNC3569 Exploits Sogou Input Method to Deploy GRAYRABBIT Backdoor
Application Security
Attackers Use BYOD Weaknesses to Access M365 via Graph API
This Week’s Security Spotlight
Application Security
OpenAI Agents Made 18,000 Unauthorized Edits to German Wiki
Application Security
Judge Rules Pentagon Actions Against Anthropic Unlawful
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
Emerging Threats in Malware: Recent Developments in Software Vulnerabilities
New malicious npm packages, deceptive LNK files, and compromised servers illustrate evolving malware tactics.
U.S. Cybersecurity Agencies Warn of Rising Threats From Exposed Rockwell Automation PLCs
U.S. cybersecurity agencies warn of Iran-linked APTs exploiting exposed Rockwell PLCs, urging swift disconnection.
CPUID Website Was Briefly Compromised to Spread Remote Access Trojan
Threat actors compromised the CPUID site for less than 24 hours, deploying a remote access trojan.
Atomic Stealer Exploits Script Editor in a New Attack Targeting macOS Users
Atomic Stealer malware targets macOS users, using Script Editor in campaigns exploiting ClickFix attack variations.
Chaos Malware Expands Its Reach to Cloud Deployments
Chaos malware is now targeting misconfigured cloud systems, moving beyond just routers and edge gear.
APT28 Deploys PRISMEX Malware Against Ukraine and Its Allies
Russian APT28 exploits spear-phishing in Ukraine with a novel malware, PRISMEX, harnessing advanced steganography and COM hijacking.
Seven Vulnerabilities Patched in OpenSSL, Several Enabling DoS Attacks
OpenSSL patches seven vulnerabilities, with several posing serious Denial of Service attack risks alongside a notable data leakage flaw.
U.S. Agencies Given Four Days to Patch Critical Ivanti EPMM Vulnerability
CISA mandates U.S. agencies to patch critical Ivanti EPMM vulnerability within four days as active exploitation continues.
Critical RCE Flaw in Apache ActiveMQ Classic Went Undetected for 13 Years
A serious RCE flaw in Apache ActiveMQ Classic hid for 13 years, posing new risks.
A $30,000 AI GPU Still Loses to Consumer Hardware in Password Cracking
Investigating why consumer GPUs outperform a $30,000 AI GPU in password cracking.
Massachusetts Hospital Faces Service Interruptions Amid Cyberattack
Signature Healthcare hospital in Massachusetts was forced to cancel some services after a cyberattack disrupted operations.
FleetWave Users Left Without Service After Chevin Takes Platform Offline
A security incident results in major FleetWave outages across UK and US as Chevin takes affected platforms offline.
Authorities Crack a $45 Million Global Cryptocurrency Scam and Recover $12 Million
Global authorities dismantled a $45M crypto scam, rescuing $12M from fraudsters and aiding 20K affected wallets.
EngageLab SDK Vulnerability Threatens Millions of Android Cryptocurrency Wallets
Vulnerability in EngageLab SDK put Android cryptocurrency wallets at risk, bypassing security sandbox protections.
Newly Discovered UAT-10362 Threat Cluster Aims at Taiwanese NGOs
UAT-10362 threatens Taiwanese NGOs with new LucidRook malware.
New Extortion Crew Uses Phishing to Breach High-Value Corporations
Emerging extortion crew targets corporations through sophisticated phishing schemes.
Smart Slider 3 Pro Plugin Update System Was Hijacked to Push Backdoored Versions
Cybercriminals hijacked the Smart Slider 3 Pro plugin update system, pushing malicious versions loaded with multiple backdoors to WordPress and Joomla...
Covert PDF Exploitation: Hackers Use Adobe Acrobat Reader for Targeted Payload Delivery
Cybercriminals exploit Adobe Acrobat Reader to assess targets and selectively deploy further payloads.
Stolen Credentials Are Turning Authentication Systems Into Attack Surfaces
Discover how wearable biometric authentication is reshaping identity verification by focusing on the user, rather than the session.
Microsoft’s Communication Breakdown Leaves Developers Locked Out Without Warning
Microsoft's handling of developer account lockouts reveals serious communication gaps that are disrupting open source workflows.