Cyber Security
Application Security
Critical ShareFile Flaws Open the Door to Unauthenticated RCE
Analysis reveals critical ShareFile flaws allowing server access and arbitrary file uploads.
Application Security
Strapi CMS Plugins Face Exploitation by Malicious npm Packages
Researchers found 36 harmful npm packages posing as Strapi CMS plugins to exploit Redis, PostgreSQL, and execute further cyber attacks.
News
Bogus Traffic Violation Text Scam Targeting Americans
Fraudulent "Notice of Default" text scams impersonate U.S. state courts, leading victims to phishing sites.
News
Qilin Ransomware Group Targets German Political Party Die Linke
Qilin ransomware group claims responsibility for a cyberattack on German political party Die Linke.
Cybersecurity
Analysis Reveals .cmd Malware Escalating Privileges and Bypassing Antivirus
Detailed analysis of a .cmd malware found in an email, escalating privileges and bypassing antivirus.
CVE Vulnerability Alerts
Fortinet Acts Quickly on Zero-Day Vulnerability Impacting FortiClient EMS Users
Fortinet issues emergency patches for a critical vulnerability (CVE-2026-35616) in FortiClient EMS, already exploited in the wild.
Cybersecurity
North Korean Cyber Operatives Drain $285 Million from Drift Exchange
A North Korean orchestrated cyber attack stole $285 million from Drift, a Solana-based exchange, on April 1, 2026.
Application Security
Axios HTTP Client Developer Targeted in North Korean Social Engineering Campaign
The popular Axios HTTP client faced a social engineering attack attributed to North Korean actors, exposing serious security risks within open-source ...
Cybersecurity
Free Android VPNs Are Quietly Working Against You
Free VPNs on Android promise protection, but often jeopardize user privacy with tracking, permissions, and risky servers.
Cybersecurity
Residential Proxies Are Breaking IP Reputation Systems for Malware Traffic
Residential proxies confuse IP reputation systems, obscuring differences between malicious traffic and legitimate users.
Cybersecurity
Drift Protocol Hit by Calculated Attack Resulting in $280 Million Loss
Drift Protocol faces a substantial breach, leading to administrative control loss and financial damages exceeding $280 million.
Cybersecurity
Apple Rolls Out DarkSword Exploit Protection to More Devices
Apple enhances its defenses against the DarkSword exploit kit, a threat linked to state-sponsored hackers and commercial spyware vendors.
Application Security
Critical Vulnerability in Claude Code Surfaces Days After Source Code Leak
Claude Code faces a critical vulnerability discovered by Adversa AI just days after its source code was unintentionally leaked by Anthropic.
Cybersecurity
Cybercriminals Exploit Empty Properties for Postal Fraud
Threat actors use vacant homes to snatch mail and perpetrate fraud using Flare's findings.
Cybersecurity
Cisco Releases Patches for Critical and High-Severity Vulnerabilities
Cisco fixes critical vulnerabilities threatening authentication, code execution, and more.
Cybersecurity
Stryker Corporation Restores Operations After Cyberattack
Stryker Corporation resumes operations after a cyberattack by Handala hacktivists.
Cybersecurity
Cybersecurity M&A Activity Surges With 38 Deals Closing in March 2026
Explore prominent cybersecurity M&A deals announced in March 2026 by Airbus, Cellebrite, and others.
Cybersecurity
Anthropic Confirms Internal Claude Code Leak Was Caused by Human Error
Anthropic confirms internal code leak of Claude Code due to human error, no sensitive data involved.
Cybersecurity
Microsoft Releases Emergency Fix for KB5079391 Update Installation Failures
Microsoft has released an emergency fix for the March 2026 KB5079391 non-security preview update, which was pulled over the weekend due to widespread ...
Application Security
Google Rolls Out Gmail Address Change and Alias Feature in the U.S.
Google introduces a feature to change Gmail addresses, enhancing user email customization options in the U.S.
Application Security
CISA Adds PHP2Shell Flaws to KEV After Working Shells Hit Honeypots
TOP CYBERSECURITY HEADLINES
CVE Vulnerability Alerts
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
HashiCorp Patches CVSS 9.9 consul-k8s Flaw CVE-2026-110720
This Week’s Security Spotlight
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
CVE Vulnerability Alerts
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
Qilin Ransomware Group Targets German Political Party Die Linke
Qilin ransomware group claims responsibility for a cyberattack on German political party Die Linke.
Analysis Reveals .cmd Malware Escalating Privileges and Bypassing Antivirus
Detailed analysis of a .cmd malware found in an email, escalating privileges and bypassing antivirus.
Fortinet Acts Quickly on Zero-Day Vulnerability Impacting FortiClient EMS Users
Fortinet issues emergency patches for a critical vulnerability (CVE-2026-35616) in FortiClient EMS, already exploited in the wild.
North Korean Cyber Operatives Drain $285 Million from Drift Exchange
A North Korean orchestrated cyber attack stole $285 million from Drift, a Solana-based exchange, on April 1, 2026.
Axios HTTP Client Developer Targeted in North Korean Social Engineering Campaign
The popular Axios HTTP client faced a social engineering attack attributed to North Korean actors, exposing serious security risks within open-source ...
Free Android VPNs Are Quietly Working Against You
Free VPNs on Android promise protection, but often jeopardize user privacy with tracking, permissions, and risky servers.
Residential Proxies Are Breaking IP Reputation Systems for Malware Traffic
Residential proxies confuse IP reputation systems, obscuring differences between malicious traffic and legitimate users.
Apple Rolls Out DarkSword Exploit Protection to More Devices
Apple enhances its defenses against the DarkSword exploit kit, a threat linked to state-sponsored hackers and commercial spyware vendors.
Drift Protocol Hit by Calculated Attack Resulting in $280 Million Loss
Drift Protocol faces a substantial breach, leading to administrative control loss and financial damages exceeding $280 million.
Critical Vulnerability in Claude Code Surfaces Days After Source Code Leak
Claude Code faces a critical vulnerability discovered by Adversa AI just days after its source code was unintentionally leaked by Anthropic.
Cybercriminals Exploit Empty Properties for Postal Fraud
Threat actors use vacant homes to snatch mail and perpetrate fraud using Flare's findings.
Cisco Releases Patches for Critical and High-Severity Vulnerabilities
Cisco fixes critical vulnerabilities threatening authentication, code execution, and more.
Stryker Corporation Restores Operations After Cyberattack
Stryker Corporation resumes operations after a cyberattack by Handala hacktivists.
Cybersecurity M&A Activity Surges With 38 Deals Closing in March 2026
Explore prominent cybersecurity M&A deals announced in March 2026 by Airbus, Cellebrite, and others.
Anthropic Confirms Internal Claude Code Leak Was Caused by Human Error
Anthropic confirms internal code leak of Claude Code due to human error, no sensitive data involved.
Microsoft Releases Emergency Fix for KB5079391 Update Installation Failures
Microsoft has released an emergency fix for the March 2026 KB5079391 non-security preview update, which was pulled over the weekend due to widespread ...
Google Rolls Out Gmail Address Change and Alias Feature in the U.S.
Google introduces a feature to change Gmail addresses, enhancing user email customization options in the U.S.
Proton Launches Meet as a Privacy-First Alternative to Google Meet and Zoom
Proton introduces Meet, a new video conferencing service focused on privacy.
Anthropic Accidentally Leaked Source Code for Claude Code
Anthropic's Claude Code source code leak report assures that no client data was breached.
EvilTokens Kit Uses Device Code Phishing to Target Microsoft Accounts
Explore how EvilTokens exploits phishing methods to endanger Microsoft accounts and facilitate business email compromise attacks.