Cyber Security
Cybersecurity
AMOS Infostealer Exploits Popular AI Platforms to Target macOS
AMOS infostealer deceptively uses AI-driven platforms to infiltrate macOS systems, gaining unauthorized access to user credentials and contributing to the wider cybercrime ecosystem.
Cybersecurity
Eurail B.V. Acknowledges Data Breach, Stolen Information Sold on Dark Web
Eurail B.V., a major European railway access provider, reported a breach with customer data now surfacing on the dark web. The incident, which occurred earlier ...
Application Security
OpenClaw Agentic AI Attacked by Information-Stealing Malware
Cybersecurity professionals must consider the impact of information-stealing malware targeting OpenClaw's AI framework. The malware reportedly focusses on files containing sensitive data such as API ...
Cybersecurity
ShinyHunters Strike Again: Canada Goose Addresses Breach Concerns
Fashion brand Canada Goose is tackling claims of a 600,000-record breach linked to hacker group ShinyHunters. The company states it's an old incident with no ...
Cybersecurity
Android 17 Beta Enhances Security and Privacy for Users
Android 17 introduces stricter app permission settings and encryption upgrades, reflecting Google’s commitment to user privacy and data protection.
Cybersecurity
ApolloMD Breach Exposes Sensitive Patient Details
The recent data breach at ApolloMD resulted in the exposure of personal and health information of 626,000 patients of its affiliated physicians and practices.
Cybersecurity
Cybercriminals Leverage Identity Abuse and SaaS Compromise in Supply Chain Attacks
Researchers reveal how cybercriminals connect supply chain attacks, identity abuse, and ransomware into a self-reinforcing ecosystem, posing severe security threats.
Cybersecurity
Apple Addresses Critical Zero-Day Exploit in Latest iOS Patch
Apple has identified and patched a zero-day vulnerability present in all iOS versions since 1.0. This serious flaw has been reportedly exploited in "extremely sophisticated ...
Cybersecurity
Infostealer Malware Targets macOS Users Through Deceptive ClickFix Campaigns
Cybercriminals employ sophisticated techniques by leveraging Claude artifacts and Google Ads in ClickFix campaigns, aiming at macOS users. They exploit specific search queries to deliver ...
Cybersecurity
CISA Mandates Immediate Patch for Critical Vulnerability in Microsoft Configuration Manager
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive for federal agencies to address a critical Microsoft Configuration Manager vulnerability, reminding them of ...
Application Security
Microsoft Configuration Manager SQL Injection Alert
A SQL injection flaw in Microsoft Configuration Manager patched in October 2024 is currently exploited, posing a significant risk to unpatched systems, including businesses and ...
CVE Vulnerability Alerts
Attackers Exploit Critical Vulnerability in BeyondTrust Remote Support
BeyondTrust Remote Support's CVE-2026-1731, a critical vulnerability, witnessed exploitation attempts within 24 hours of the public release of a Proof of Concept (PoC), highlighting attackers' ...
Cybersecurity
Major Breach at Dutch Mobile Network Operator Exposes Sensitive Customer Data
A significant breach at a leading Dutch mobile network operator exposed sensitive customer information, affecting around 6.2 million individuals. Names, addresses, and bank details were ...
Application Security
Integration of Criminal IP with IBM QRadar: Enhancing IP Threat Intelligence
Security operations centers (SOC) can enhance their threat detection capabilities with the integration of IP-based intelligence from Criminal IP into IBM's QRadar. This integration offers ...
CVE Vulnerability Alerts
CISA Catalog Includes BeyondTrust Flaw Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added a vulnerability in BeyondTrust RS and PRA, identified as CVE-2026-1731, to its Known Exploited ...
Cybersecurity
CANFAIL Malware Unveiled Amidst Russian Cyber Influence Allegations
A previously undocumented threat actor, possibly linked to Russian intelligence services, has been identified targeting Ukrainian defense, government, and energy sectors using CANFAIL malware, raising ...
Cybersecurity
Social Engineering Attack Compromises Fintech Company Figure’s Security
Fintech firm Figure confirmed a data breach following a social engineering attack that deceived an employee. The incident enabled hackers to gain access and steal ...
Application Security
Ivanti Endpoint Manager Mobile Critical Vulnerabilities Exploited by a Single Threat Actor
Cybersecurity experts have identified a single threat actor responsible for exploiting critical vulnerabilities in Ivanti Endpoint Manager Mobile. These vulnerabilities, CVE-2026-21962 and CVE-2026-24061, are actively ...
News
UAT-9921 Emerges with VoidLink to Challenge Technology and Financial Entities
The newly identified threat actor UAT-9921 is utilizing VoidLink, a sophisticated modular attack framework, to compromise technology and financial sectors, according to Cisco Talos.
Application Security
Dangerous Chrome Extensions Leak Personal Data and Track Users
A recent investigation revealed that over 300 Chrome extensions, collectively downloaded more than 37 million times, are involved in leaking or stealing user data. These ...
Application Security
LiteLLM 1.107.0 Backdoored in PyPI Supply Chain Attack
Cybersecurity
WhiteArmour Claims Breach of Disney Staff Directory
TOP CYBERSECURITY HEADLINES
Application Security
Signal RingRTC Flaw CVE-2026-113380 Can Keep Mic and Camera On
Cybersecurity
WhiteArmour Claims Breach of Disney Staff Directory
Application Security
Chrome 156 Patches 353 Security Flaws, Six Rated Critical
This Week’s Security Spotlight
Application Security
PHP Ships Emergency Patches for PHP2Shell as Exploitation Begins
Application Security
Siemens Software Center Flaw Exploited in ROMULUS ClickFix Attacks
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
ShinyHunters Strike Again: Canada Goose Addresses Breach Concerns
Fashion brand Canada Goose is tackling claims of a 600,000-record breach linked to hacker group ShinyHunters. The company states it's an old incident with no ...
Android 17 Beta Enhances Security and Privacy for Users
Android 17 introduces stricter app permission settings and encryption upgrades, reflecting Google’s commitment to user privacy and data protection.
ApolloMD Breach Exposes Sensitive Patient Details
The recent data breach at ApolloMD resulted in the exposure of personal and health information of 626,000 patients of its affiliated physicians and practices.
Cybercriminals Leverage Identity Abuse and SaaS Compromise in Supply Chain Attacks
Researchers reveal how cybercriminals connect supply chain attacks, identity abuse, and ransomware into a self-reinforcing ecosystem, posing severe security threats.
Apple Addresses Critical Zero-Day Exploit in Latest iOS Patch
Apple has identified and patched a zero-day vulnerability present in all iOS versions since 1.0. This serious flaw has been reportedly exploited in "extremely sophisticated ...
Infostealer Malware Targets macOS Users Through Deceptive ClickFix Campaigns
Cybercriminals employ sophisticated techniques by leveraging Claude artifacts and Google Ads in ClickFix campaigns, aiming at macOS users. They exploit specific search queries to deliver ...
CISA Mandates Immediate Patch for Critical Vulnerability in Microsoft Configuration Manager
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a directive for federal agencies to address a critical Microsoft Configuration Manager vulnerability, reminding them of ...
Microsoft Configuration Manager SQL Injection Alert
A SQL injection flaw in Microsoft Configuration Manager patched in October 2024 is currently exploited, posing a significant risk to unpatched systems, including businesses and ...
Attackers Exploit Critical Vulnerability in BeyondTrust Remote Support
BeyondTrust Remote Support's CVE-2026-1731, a critical vulnerability, witnessed exploitation attempts within 24 hours of the public release of a Proof of Concept (PoC), highlighting attackers' ...
Major Breach at Dutch Mobile Network Operator Exposes Sensitive Customer Data
A significant breach at a leading Dutch mobile network operator exposed sensitive customer information, affecting around 6.2 million individuals. Names, addresses, and bank details were ...
Integration of Criminal IP with IBM QRadar: Enhancing IP Threat Intelligence
Security operations centers (SOC) can enhance their threat detection capabilities with the integration of IP-based intelligence from Criminal IP into IBM's QRadar. This integration offers ...
CISA Catalog Includes BeyondTrust Flaw Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added a vulnerability in BeyondTrust RS and PRA, identified as CVE-2026-1731, to its Known Exploited ...
CANFAIL Malware Unveiled Amidst Russian Cyber Influence Allegations
A previously undocumented threat actor, possibly linked to Russian intelligence services, has been identified targeting Ukrainian defense, government, and energy sectors using CANFAIL malware, raising ...
Social Engineering Attack Compromises Fintech Company Figure’s Security
Fintech firm Figure confirmed a data breach following a social engineering attack that deceived an employee. The incident enabled hackers to gain access and steal ...
Ivanti Endpoint Manager Mobile Critical Vulnerabilities Exploited by a Single Threat Actor
Cybersecurity experts have identified a single threat actor responsible for exploiting critical vulnerabilities in Ivanti Endpoint Manager Mobile. These vulnerabilities, CVE-2026-21962 and CVE-2026-24061, are actively ...
UAT-9921 Emerges with VoidLink to Challenge Technology and Financial Entities
The newly identified threat actor UAT-9921 is utilizing VoidLink, a sophisticated modular attack framework, to compromise technology and financial sectors, according to Cisco Talos.
Dangerous Chrome Extensions Leak Personal Data and Track Users
A recent investigation revealed that over 300 Chrome extensions, collectively downloaded more than 37 million times, are involved in leaking or stealing user data. These ...
Trezor and Ledger Crypto Wallets Targeted by Mail Scam
Threat actors are exploiting trust in security hardware brands by sending fake letters impersonating Trezor and Ledger, targeting cryptocurrency users. This deception aims to collect ...
Google Groups Exploited in Lumma Stealer Malware Campaign
Attackers are using Google Groups to distribute Lumma Stealer malware, targeting credentials across Windows and Linux platforms. They exploit Google services, deploying trojanized "Ninja Browser" ...
Malicious JavaScript Targets Cryptocurrency Users Via Pastebin
Cybercriminals employ a new strategy using Pastebin to execute ClickFix-style attacks, targeting cryptocurrency users’ Bitcoin transactions. The attackers use malicious JavaScript to hijack swaps, leading ...