Cyber Security
Self-Healing WordPress Backdoor Defies Standard Removal
Cisco Patches Actively Exploited Catalyst SD-WAN Flaw
MetaMask Discloses Incident, Exits Ethereum Validators
TeamViewer Patches Critical Access-Control Bypass Flaw
WatchGuard Patches Critical Root Code Execution Flaw
CISA Warns of Critical Pre-Auth Flaw in MikroTik Routers
FTC Confirms Probe Into OpenAI, Anthropic AI Agents
Teen Researcher’s AI Tool Gains Admin on Microsoft Titan
OpenSSL Patches High-Severity DTLS Memory Leak Flaw
CSuite Phishing Campaign Hijacks Microsoft 365 Sessions
Chrome, Firefox Patch Over 100 Flaws in Joint Update
Pentagon Records Agency Breach Exposes Data on 3 Million
France Tax Agency Breached Seven Weeks via Stolen Passwords
Citrix NetScaler Zero-Days Deployed WHIPSHOT, SLAPSHOT
FBI Tells ShinyHunters Members to Turn Themselves In
Russia’s Star Blizzard Targets 100+ Orgs With Fake Invites
New Spectre-v2 BTR Attack Leaks Linux Root Password Hashes
Autonomous AI Agent Breaches Cybersecurity Nonprofit DIVD
OpenAI Discloses Self-Replicating Worm-Style Prompt Injection
Fake ChatGPT Custom GPTs Push ClickFix Attacks to Drop RAT
101 Malicious npm Packages Add Developers to WhatsApp Groups
Glow Security Finds 13,000 Exposed AI Agent Screenshots
Kiteworks Patches Critical Flaw Found During Precautionary Shutdown
Ex-Air Force Members Sentenced to 189 Months for BEC Scams
Vietnamese National Charged in $16 Million Crypto Scam
Apple Patches CoreGraphics Zero-Day Used in Targeted Attacks
MCP Python SDK Flaw Exposes OAuth Credentials to Malicious Servers
OpenAI Shelves GPT-6.1 Astra After Safety Failures and Rogue Actions
Ransomware Attack Disrupts Keio Corporation Business Systems
Times Car Breach Exposes 6.6 Million Japanese Car-Sharing Accounts
Nevada Introduces Comprehensive Data Classification Framework Post-Cyberattack
Cybersecurity
Nevada Introduces Comprehensive Data Classification Framework Post-Cyberattack
Nevada has developed a framework to classify data into "public," "sensitive," "confidential," and "restricted" categories, improving cybersecurity preparedness following a cyberattack.
Suspected Premature Alerts Among Telecommunications on Telnet Vulnerability
Cybersecurity
Suspected Premature Alerts Among Telecommunications on Telnet Vulnerability
Telecommunications companies may have had early alerts about the significant January Telnet vulnerability. An analysis reveals that unusual port filtering and traffic patterns might indicate ...
GitGuardian Secures $50 Million to Advance Secrets Detection and Identity Management
Cybersecurity
GitGuardian Secures $50 Million to Advance Secrets Detection and Identity Management
GitGuardian, a leader in secrets detection, has successfully raised $50 million in a funding round. Learn how this financial boost aims to enhance their offerings ...
Conduent Breach Expands in Scope, Affecting 25 Million Impact on Volvo Group
Cybersecurity
Conduent Breach Expands in Scope, Affecting 25 Million: Impact on Volvo Group
Recent revelations show the Conduent data breach affects around 25 million individuals, considerably more than the initially estimated 10 million. The breach involves sensitive data, ...
Zast.AI Secures $6 Million for Innovating AI-Powered Software Vulnerability Detection
News
Zast.AI Secures $6 Million for Innovating AI-Powered Software Vulnerability Detection
Leveraging artificial intelligence, Zast.AI aims to advance the field of code security by implementing AI agents to effectively identify and verify software vulnerabilities, ensuring accuracy ...
New Malicious Packages in npm and PyPI Tied to Lazarus Group
Cybersecurity
New Malicious Packages in npm and PyPI Tied to Lazarus Group
Cybersecurity experts have uncovered malicious packages in the npm and PyPI registries, part of a recruitment-themed phishing campaign linked to the North Korean Lazarus Group.
DavaIndia Security Breach Exposed Critical System Control
Cybersecurity
DavaIndia Security Breach Exposed Critical System Control
DavaIndia Pharmacy's systems were compromised, revealing critical security vulnerabilities. Customer data was exposed, and control was accessed by outsiders, reflective of pressing concerns within India's ...
Cloud-Based Password Managers Face New Security Vulnerabilities
Cybersecurity
Cloud-Based Password Managers Face New Security Vulnerabilities
A recent study uncovers vulnerabilities in popular cloud-based password managers like Bitwarden, Dashlane, and LastPass. Researchers warn these weaknesses could lead to integrity issues or ...
South Korean Fine Imposed on Dior, Louis Vuitton, and Tiffany Following Salesforce Breach
Cybersecurity
South Korean Fine Imposed on Dior, Louis Vuitton, and Tiffany Following Salesforce Breach
The South Korean government imposed a $25 million fine on Dior, Louis Vuitton, and Tiffany after data breaches affected their Salesforce systems. The incident compromised ...
Odido Faces Cybersecurity Breach Threatening Customer Data
Cybersecurity
Odido Faces Cybersecurity Breach Threatening Customer Data
Odido, a Dutch telecom provider, reports a cyberattack impacting the data privacy of 6.2 million customers. The attack exposed sensitive customer information, raising alarm over ...
Dutch Police's Data Debacle Arrest Over Accidental File Sharing
Cybersecurity
Dutch Police’s Data Debacle: Arrest Over Accidental File Sharing
A Dutch citizen found himself in legal trouble after law enforcement accidentally sent him sensitive files. Rather than returning them, the individual chose to hold ...
CISA Faces Challenges With Limited Resources Amid DHS Shutdown
Cybersecurity
CISA Faces Challenges With Limited Resources Amid DHS Shutdown
Operating with just 38% of its staff, CISA confronts operational challenges due to the DHS shutdown. The agency's staffing has dropped significantly, impacting key cybersecurity ...
AMOS Infostealer Exploits Popular AI Platforms to Target macOS
Cybersecurity
AMOS Infostealer Exploits Popular AI Platforms to Target macOS
AMOS infostealer deceptively uses AI-driven platforms to infiltrate macOS systems, gaining unauthorized access to user credentials and contributing to the wider cybercrime ecosystem.
Eurail B.V. Acknowledges Data Breach, Stolen Information Sold on Dark Web
Cybersecurity
Eurail B.V. Acknowledges Data Breach, Stolen Information Sold on Dark Web
Eurail B.V., a major European railway access provider, reported a breach with customer data now surfacing on the dark web. The incident, which occurred earlier ...
OpenClaw Agentic AI Attacked by Information-Stealing Malware
Application Security
OpenClaw Agentic AI Attacked by Information-Stealing Malware
Cybersecurity professionals must consider the impact of information-stealing malware targeting OpenClaw's AI framework. The malware reportedly focusses on files containing sensitive data such as API ...
ShinyHunters Strike Again Canada Goose Addresses Breach Concerns
Cybersecurity
ShinyHunters Strike Again: Canada Goose Addresses Breach Concerns
Fashion brand Canada Goose is tackling claims of a 600,000-record breach linked to hacker group ShinyHunters. The company states it's an old incident with no ...
Android 17 Beta Enhances Security and Privacy for Users
Cybersecurity
Android 17 Beta Enhances Security and Privacy for Users
Android 17 introduces stricter app permission settings and encryption upgrades, reflecting Google’s commitment to user privacy and data protection.
ApolloMD Breach Exposes Sensitive Patient Details
Cybersecurity
ApolloMD Breach Exposes Sensitive Patient Details
The recent data breach at ApolloMD resulted in the exposure of personal and health information of 626,000 patients of its affiliated physicians and practices.
Cybercriminals Leverage Identity Abuse and SaaS Compromise in Supply Chain Attacks
Cybersecurity
Cybercriminals Leverage Identity Abuse and SaaS Compromise in Supply Chain Attacks
Researchers reveal how cybercriminals connect supply chain attacks, identity abuse, and ransomware into a self-reinforcing ecosystem, posing severe security threats.
Apple Addresses Critical Zero-Day Exploit in Latest iOS Patch
Cybersecurity
Apple Addresses Critical Zero-Day Exploit in Latest iOS Patch
Apple has identified and patched a zero-day vulnerability present in all iOS versions since 1.0. This serious flaw has been reportedly exploited in "extremely sophisticated ...
CVE Vulnerability Alerts
Critical FortiMail Zero-Day Exploited With No Patch Yet
Cybersecurity
Pentagon Records Agency Breach Exposes Data on 3 Million
Cybersecurity
Police Dismantle KillSec Ransomware Gang, Nab Teen Leader
Cybersecurity
Ransomware Attack Disrupts Keio Corporation Business Systems

TOP CYBERSECURITY HEADLINES

This Week’s Security Spotlight

Cybersecurity
FTC Confirms Probe Into OpenAI, Anthropic AI Agents
Cybersecurity
CSuite Phishing Campaign Hijacks Microsoft 365 Sessions
Cybersecurity
Pentagon Records Agency Breach Exposes Data on 3 Million
Cybersecurity
OpenAI Shelves GPT-6.1 Astra After Safety Failures and Rogue Actions
Trending

Daily Briefing Newsletter

Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Featured Videos​

  • All
  • Application Security
  • Blog
  • CVE Vulnerability Alerts
  • Cybersecurity
  • Cybersecurity Newsletter
  • Data Security
  • Endpoint Security
  • Identity and Access Management
  • Information Security
  • Network Security
  • News
  • Phishing
  • Podcasts
  • Product Reviews
  • Ransomware
  • Ransomware Victims
  • Resources
  • Security Spotlight
  • Sponsored
  • Threat Actors
  • Threat Actors
  • Threat Detection Tools
Conduent Breach Expands in Scope, Affecting 25 Million: Impact on Volvo Group
Recent revelations show the Conduent data breach affects around 25 million individuals, considerably more than the initially estimated 10 million. The breach involves sensitive data, ...
Zast.AI Secures $6 Million for Innovating AI-Powered Software Vulnerability Detection
Leveraging artificial intelligence, Zast.AI aims to advance the field of code security by implementing AI agents to effectively identify and verify software vulnerabilities, ensuring accuracy ...
New Malicious Packages in npm and PyPI Tied to Lazarus Group
Cybersecurity experts have uncovered malicious packages in the npm and PyPI registries, part of a recruitment-themed phishing campaign linked to the North Korean Lazarus Group.
DavaIndia Security Breach Exposed Critical System Control
DavaIndia Pharmacy's systems were compromised, revealing critical security vulnerabilities. Customer data was exposed, and control was accessed by outsiders, reflective of pressing concerns within India's ...
Cloud-Based Password Managers Face New Security Vulnerabilities
A recent study uncovers vulnerabilities in popular cloud-based password managers like Bitwarden, Dashlane, and LastPass. Researchers warn these weaknesses could lead to integrity issues or ...
South Korean Fine Imposed on Dior, Louis Vuitton, and Tiffany Following Salesforce Breach
The South Korean government imposed a $25 million fine on Dior, Louis Vuitton, and Tiffany after data breaches affected their Salesforce systems. The incident compromised ...
Odido Faces Cybersecurity Breach Threatening Customer Data
Odido, a Dutch telecom provider, reports a cyberattack impacting the data privacy of 6.2 million customers. The attack exposed sensitive customer information, raising alarm over ...
Dutch Police’s Data Debacle: Arrest Over Accidental File Sharing
A Dutch citizen found himself in legal trouble after law enforcement accidentally sent him sensitive files. Rather than returning them, the individual chose to hold ...
CISA Faces Challenges With Limited Resources Amid DHS Shutdown
Operating with just 38% of its staff, CISA confronts operational challenges due to the DHS shutdown. The agency's staffing has dropped significantly, impacting key cybersecurity ...
AMOS Infostealer Exploits Popular AI Platforms to Target macOS
AMOS infostealer deceptively uses AI-driven platforms to infiltrate macOS systems, gaining unauthorized access to user credentials and contributing to the wider cybercrime ecosystem.
Eurail B.V. Acknowledges Data Breach, Stolen Information Sold on Dark Web
Eurail B.V., a major European railway access provider, reported a breach with customer data now surfacing on the dark web. The incident, which occurred earlier ...
OpenClaw Agentic AI Attacked by Information-Stealing Malware
Cybersecurity professionals must consider the impact of information-stealing malware targeting OpenClaw's AI framework. The malware reportedly focusses on files containing sensitive data such as API ...
ShinyHunters Strike Again: Canada Goose Addresses Breach Concerns
Fashion brand Canada Goose is tackling claims of a 600,000-record breach linked to hacker group ShinyHunters. The company states it's an old incident with no ...
Android 17 Beta Enhances Security and Privacy for Users
Android 17 introduces stricter app permission settings and encryption upgrades, reflecting Google’s commitment to user privacy and data protection.
ApolloMD Breach Exposes Sensitive Patient Details
The recent data breach at ApolloMD resulted in the exposure of personal and health information of 626,000 patients of its affiliated physicians and practices.
Cybercriminals Leverage Identity Abuse and SaaS Compromise in Supply Chain Attacks
Researchers reveal how cybercriminals connect supply chain attacks, identity abuse, and ransomware into a self-reinforcing ecosystem, posing severe security threats.
Apple Addresses Critical Zero-Day Exploit in Latest iOS Patch
Apple has identified and patched a zero-day vulnerability present in all iOS versions since 1.0. This serious flaw has been reportedly exploited in "extremely sophisticated ...
Infostealer Malware Targets macOS Users Through Deceptive ClickFix Campaigns
Cybercriminals employ sophisticated techniques by leveraging Claude artifacts and Google Ads in ClickFix campaigns, aiming at macOS users. They exploit specific search queries to deliver ...
CISA Mandates Immediate Patch for Critical Vulnerability in Microsoft Configuration Manager
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive for federal agencies to address a critical Microsoft Configuration Manager vulnerability, reminding them of ...
Microsoft Configuration Manager SQL Injection Alert
A SQL injection flaw in Microsoft Configuration Manager patched in October 2024 is currently exploited, posing a significant risk to unpatched systems, including businesses and ...