Cyber Security
Cybersecurity
North Korea Turned a Gaming App Into a Spyware Platform
North Korean APT37 compromised a gaming platform to deliver BirdCall, a new cross-platform spy tool targeting Android and Windows users since 2024.
Application Security
Debug Mode Left Open: Enterprise Platform Hit With Unauthenticated RCE
CVE-2026-22679, a critical unauthenticated RCE in Weaver E-cology, has been actively exploited since March — weeks before public disclosure reached defenders.
Application Security
One Zero-Day, 40,000 Servers: The cPanel Mass-Compromise
A critical cPanel authentication bypass zero-day exploited for two months before disclosure compromised 40,000+ servers and targeted governments in Southeast Asia.
Blog
Confident Posture: Navigating Ransomware Incidents with Expert Guidance
No organization wants to be the next ransomware headline. But every business, from small startups to global enterprises, is at ...
Cybersecurity
Threat Actors Are Ramping Up Microsoft Teams Exploitation for Network Access
Cybercriminals are increasingly targeting Microsoft Teams in enterprise attacks, using the platform alongside legitimate tools to gain unauthorized ac...
Cybersecurity
Cybercriminals Are Bending Trust, Not Breaking Systems
Cyber attackers bypass systems without breaking them, taking advantage of trusted pathways, smartly bending trust.
Application Security
Anthropic’s Claude Desktop Unauthorized Installations Raise EU Law Compliance Concerns
Claude Desktop's unauthorized modifications may breach EU laws on clear user consent.
CVE Vulnerability Alerts
Severe Command Injection Flaw Discovered in SGLang
A critical vulnerability in SGLang could allow remote code execution. Tracked as CVE-2026-5760, this flaw scores 9.8 on CVSS.
Cybersecurity
Serial-to-IP Converter Flaws in Lantronix and Silex Products Put Critical Systems at Risk
Vulnerabilities in Lantronix and Silex products risk exploitation in OT and healthcare sectors.
News
Seiko USA Faces Ransom Threat After Website Defacement
Attackers reportedly demand ransom from Seiko USA after defacing the website and claiming to possess customer data.
Cybersecurity
Scottish Man Pleads Guilty in $8 Million Cryptocurrency Heist
A Scottish man pleads guilty in a US court to a cryptocurrency theft using phishing and SIM-swap tactics.
Cybersecurity
Cyberattacks Are Outpacing MSP and Corporate Defenses
Discover cybersecurity strategies to counter evolving threats in an upcoming webinar focused on security and recovery.
Application Security
Huntress Identifies Active Exploitation of Microsoft Defender Vulnerabilities
Huntress identifies threat actors exploiting vulnerabilities in Microsoft Defender.
Cybersecurity
Lawmakers’ Concerns About AI Include Worries of Potential ‘Destruction’
Lawmakers discuss the rapid development of AI, expressing fears over its potential impact on various global aspects.
Application Security
Microsoft Edge Update Introduces Bug Affecting Microsoft Teams Chats
A recent update in the Microsoft Edge browser has led to a bug impacting the right-click paste function in Microsoft Teams chats.
News
Threat Actors Repurpose Tycoon 2FA Tools in New Phishing Schemes
Cybercriminals adapt Tycoon 2FA tools for phishing, revealing new security challenges.
CVE Vulnerability Alerts
Attackers Exploit Three Zero-Day Flaws in Microsoft Defender to Gain Elevated Access
Three zero-day flaws in Microsoft Defender, dubbed BlueHammer, RedSun, and UnDefend, are being actively exploited to gain elevated system access.
Cybersecurity
Vercel Suffers Security Breach as Threat Actors Attempt to Sell Stolen Data
Vercel's recent security breach exposes unauthorized data access as threat actors intend to sell compromised information from their systems.
Cybersecurity
AI Security Challenges: Vendors’ Dual Messaging Raises Questions
AI vendors promote AI for security while denying its flaws. This raises questions about their maturity and transparency.
Cybersecurity
NIST Alters Approach to Vulnerability Assessments, Ceasing Severity Scores for Lower-Priority Issues
NIST plans to halt severity scoring for lower-priority vulnerabilities due to high submission volumes.
Application Security
CISA Adds PHP2Shell Flaws to KEV After Working Shells Hit Honeypots
TOP CYBERSECURITY HEADLINES
CVE Vulnerability Alerts
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
HashiCorp Patches CVSS 9.9 consul-k8s Flaw CVE-2026-110720
This Week’s Security Spotlight
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
CVE Vulnerability Alerts
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
Confident Posture: Navigating Ransomware Incidents with Expert Guidance
No organization wants to be the next ransomware headline. But every business, from small startups to global enterprises, is at risk from disruptive and financially ...
Threat Actors Are Ramping Up Microsoft Teams Exploitation for Network Access
Cybercriminals are increasingly targeting Microsoft Teams in enterprise attacks, using the platform alongside legitimate tools to gain unauthorized ac...
Cybercriminals Are Bending Trust, Not Breaking Systems
Cyber attackers bypass systems without breaking them, taking advantage of trusted pathways, smartly bending trust.
Anthropic’s Claude Desktop Unauthorized Installations Raise EU Law Compliance Concerns
Claude Desktop's unauthorized modifications may breach EU laws on clear user consent.
Severe Command Injection Flaw Discovered in SGLang
A critical vulnerability in SGLang could allow remote code execution. Tracked as CVE-2026-5760, this flaw scores 9.8 on CVSS.
Serial-to-IP Converter Flaws in Lantronix and Silex Products Put Critical Systems at Risk
Vulnerabilities in Lantronix and Silex products risk exploitation in OT and healthcare sectors.
Seiko USA Faces Ransom Threat After Website Defacement
Attackers reportedly demand ransom from Seiko USA after defacing the website and claiming to possess customer data.
Scottish Man Pleads Guilty in $8 Million Cryptocurrency Heist
A Scottish man pleads guilty in a US court to a cryptocurrency theft using phishing and SIM-swap tactics.
Cyberattacks Are Outpacing MSP and Corporate Defenses
Discover cybersecurity strategies to counter evolving threats in an upcoming webinar focused on security and recovery.
Huntress Identifies Active Exploitation of Microsoft Defender Vulnerabilities
Huntress identifies threat actors exploiting vulnerabilities in Microsoft Defender.
Lawmakers’ Concerns About AI Include Worries of Potential ‘Destruction’
Lawmakers discuss the rapid development of AI, expressing fears over its potential impact on various global aspects.
Microsoft Edge Update Introduces Bug Affecting Microsoft Teams Chats
A recent update in the Microsoft Edge browser has led to a bug impacting the right-click paste function in Microsoft Teams chats.
Threat Actors Repurpose Tycoon 2FA Tools in New Phishing Schemes
Cybercriminals adapt Tycoon 2FA tools for phishing, revealing new security challenges.
Attackers Exploit Three Zero-Day Flaws in Microsoft Defender to Gain Elevated Access
Three zero-day flaws in Microsoft Defender, dubbed BlueHammer, RedSun, and UnDefend, are being actively exploited to gain elevated system access.
Vercel Suffers Security Breach as Threat Actors Attempt to Sell Stolen Data
Vercel's recent security breach exposes unauthorized data access as threat actors intend to sell compromised information from their systems.
AI Security Challenges: Vendors’ Dual Messaging Raises Questions
AI vendors promote AI for security while denying its flaws. This raises questions about their maturity and transparency.
NIST Alters Approach to Vulnerability Assessments, Ceasing Severity Scores for Lower-Priority Issues
NIST plans to halt severity scoring for lower-priority vulnerabilities due to high submission volumes.
Phishing Scams Are Now Exploiting Apple’s Trusted Email Servers
Apple account change alerts misused for phishing, mimicking legitimate iPhone purchase notices.
Hackers Target Trucking and Logistics Firms in Organized Crime-Linked Cyber Campaign
Hackers linked to organized crime infiltrate logistics companies, posing rising threats of cargo theft and payment diversion.
Critical Nginx-UI Vulnerability Lets Attackers Seize Full Server Control
Nginx servers vulnerable to attacks via a flaw (CVE-2026-33032) that allows authentication bypass.