Cyber Security
Cybersecurity
UNC1069 Linked to Axios NPM Supply Chain Attack for Financial Intrusion
Google attributes Axios npm attack to North Korean threat group UNC1069, aiming for financial theft.
Cybersecurity
The “Doctor No” Problem Is Changing the Face of Enterprise Security
The controversial "Doctor No" role in security operations highlights a shift from mere obstruction to strategic decision-making.
Cybersecurity
Open VSX Bug Allowed Malicious VS Code Extensions Into the Registry
Cybersecurity experts reveal details of an Open VSX scanning flaw that allowed malicious VS Code extensions to pass vetting and enter the registry.
Cybersecurity
OpenAI Introduces a Bug Bounty Program Targeting Safety Risks and Exploitable Issues
OpenAI initiates a bug bounty program to uncover and mitigate abuse and safety vulnerabilities.
News
New Phishing Techniques Threaten TikTok Business Account Security
Cybercriminals use phishing tactics to hijack TikTok business accounts.
Cybersecurity
US and UK Seek Advanced Tech to Counter Underwater Drone Threats
US and UK aim to strengthen maritime defense against underwater drones.
Cybersecurity
AFC Ajax Data Breach Exposed Systems and Allowed Intruder Control
AFC Ajax confirms a significant data breach that exposed vulnerabilities in its internal systems, enabling unauthorized access.
Cybersecurity
TP-Link Routers Receive Patches for High-Severity Security Flaws
TP-Link patches high-severity router flaws that could enable authentication bypass, arbitrary command execution, and configuration file decryption.
Cybersecurity
Cloudflare-Themed Scam Targets Macs With Infiniti Stealer Malware
Cloudflare-themed attack uses ClickFix tactics to deliver Python-based Infiniti stealer on macOS systems.
Cybersecurity
Infinity Stealer Malware Takes Aim at macOS Systems
New malware, Infinity Stealer, targeting macOS via Python payload compiled with Nuitka.
Cybersecurity
Iranian Hackers Breach FBI Director’s Personal Email Account
Iranian-backed hackers penetrated FBI director's email, leaked sensitive information online.
News
Russian-Affiliated Attackers Deploy DarkSword Exploit Kit Targeting iOS Devices
Russian-based TA446 group wields DarkSword to compromise iOS devices, escalating cybersecurity threats.
Cybersecurity
European Commission Responds to Cloud Infrastructure Cyberattack
The European Commission contained a cyberattack affecting its cloud infrastructure, ensuring no internal network disruption to Europa.eu websites.
Application Security
Smart Slider 3 Plugin Flaw Lets Subscriber-Level Users Access Server Files
Security flaw in Smart Slider 3 WordPress plugin risks unauthorized file access across more than 800,000 websites.
Cybersecurity
Apple Alerts Users to Update Outdated iPhones and iPads Due to Active Web-Based Threats
Apple is urging iOS and iPadOS users to update their devices immediately due to active web-based security threats.
Cybersecurity
CareCloud Responds to a Potential Data Security Breach
CareCloud investigates potential data breach in its electronic health record system, raising cybersecurity concerns.
Cybersecurity
Cybercrime Group Targets Developers with Malicious Telnyx Package on PyPI
Cybercrime group associated with Trivy attack uploads malicious Telnyx packages to PyPI aiming to deploy credential-stealing malware.
CVE Vulnerability Alerts
Hackers Exploit a Critical Citrix Vulnerability to Steal Sensitive Data
Critical Citrix vulnerability CVE-2026-3055 is targeted by attackers to steal data.
Cybersecurity
A Hidden Flaw in OpenAI ChatGPT Turns Conversations Into Data Leaks
New vulnerability in OpenAI ChatGPT allows secret data leaks.
Cybersecurity
Researchers Uncover a New Malware Loader Targeting Credentials Through ClickFix
DeepLoad, a new malware loader, exploits the ClickFix tactic with AI-assisted obfuscation.
TOP CYBERSECURITY HEADLINES
Application Security
AI Browser Extensions Pose a Hidden Risk to Network Security
Application Security
Critical Marimo Vulnerability Is Now Being Actively Exploited for Credential Theft
This Week’s Security Spotlight
Application Security
New Bypass Technique Bypasses Apple’s AI Safeguards
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
OpenAI Introduces a Bug Bounty Program Targeting Safety Risks and Exploitable Issues
OpenAI initiates a bug bounty program to uncover and mitigate abuse and safety vulnerabilities.
New Phishing Techniques Threaten TikTok Business Account Security
Cybercriminals use phishing tactics to hijack TikTok business accounts.
US and UK Seek Advanced Tech to Counter Underwater Drone Threats
US and UK aim to strengthen maritime defense against underwater drones.
AFC Ajax Data Breach Exposed Systems and Allowed Intruder Control
AFC Ajax confirms a significant data breach that exposed vulnerabilities in its internal systems, enabling unauthorized access.
TP-Link Routers Receive Patches for High-Severity Security Flaws
TP-Link patches high-severity router flaws that could enable authentication bypass, arbitrary command execution, and configuration file decryption.
Cloudflare-Themed Scam Targets Macs With Infiniti Stealer Malware
Cloudflare-themed attack uses ClickFix tactics to deliver Python-based Infiniti stealer on macOS systems.
Infinity Stealer Malware Takes Aim at macOS Systems
New malware, Infinity Stealer, targeting macOS via Python payload compiled with Nuitka.
Iranian Hackers Breach FBI Director’s Personal Email Account
Iranian-backed hackers penetrated FBI director's email, leaked sensitive information online.
Russian-Affiliated Attackers Deploy DarkSword Exploit Kit Targeting iOS Devices
Russian-based TA446 group wields DarkSword to compromise iOS devices, escalating cybersecurity threats.
European Commission Responds to Cloud Infrastructure Cyberattack
The European Commission contained a cyberattack affecting its cloud infrastructure, ensuring no internal network disruption to Europa.eu websites.
Smart Slider 3 Plugin Flaw Lets Subscriber-Level Users Access Server Files
Security flaw in Smart Slider 3 WordPress plugin risks unauthorized file access across more than 800,000 websites.
Apple Alerts Users to Update Outdated iPhones and iPads Due to Active Web-Based Threats
Apple is urging iOS and iPadOS users to update their devices immediately due to active web-based security threats.
CareCloud Responds to a Potential Data Security Breach
CareCloud investigates potential data breach in its electronic health record system, raising cybersecurity concerns.
Cybercrime Group Targets Developers with Malicious Telnyx Package on PyPI
Cybercrime group associated with Trivy attack uploads malicious Telnyx packages to PyPI aiming to deploy credential-stealing malware.
Hackers Exploit a Critical Citrix Vulnerability to Steal Sensitive Data
Critical Citrix vulnerability CVE-2026-3055 is targeted by attackers to steal data.
A Hidden Flaw in OpenAI ChatGPT Turns Conversations Into Data Leaks
New vulnerability in OpenAI ChatGPT allows secret data leaks.
Researchers Uncover a New Malware Loader Targeting Credentials Through ClickFix
DeepLoad, a new malware loader, exploits the ClickFix tactic with AI-assisted obfuscation.
Huskeys Steps Out of Stealth With $8 Million in Funding and a New Edge Security Platform
Huskeys announces its $8M funding and an AI-driven edge security management platform built to secure the full edge security stack.
Apple Blocks Dangerous Terminal Commands in macOS Tahoe 26.4
Apple adds a security feature in macOS Tahoe 26.4 to block harmful Terminal commands, alerting users to potential risks before execution.
Zero-Click Flaw in Telegram Raises Security Alarms Despite Company Denial
Discover the high-severity Telegram flaw enabling zero-click remote code execution.