Cyber Security
Application Security
Microsoft Configuration Manager SQL Injection Alert
A SQL injection flaw in Microsoft Configuration Manager patched in October 2024 is currently exploited, posing a significant risk to unpatched systems, including businesses and ...
CVE Vulnerability Alerts
Attackers Exploit Critical Vulnerability in BeyondTrust Remote Support
BeyondTrust Remote Support's CVE-2026-1731, a critical vulnerability, witnessed exploitation attempts within 24 hours of the public release of a Proof of Concept (PoC), highlighting attackers' ...
Cybersecurity
Major Breach at Dutch Mobile Network Operator Exposes Sensitive Customer Data
A significant breach at a leading Dutch mobile network operator exposed sensitive customer information, affecting around 6.2 million individuals. Names, addresses, and bank details were ...
Application Security
Integration of Criminal IP with IBM QRadar: Enhancing IP Threat Intelligence
Security operations centers (SOC) can enhance their threat detection capabilities with the integration of IP-based intelligence from Criminal IP into IBM's QRadar. This integration offers ...
CVE Vulnerability Alerts
CISA Catalog Includes BeyondTrust Flaw Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added a vulnerability in BeyondTrust RS and PRA, identified as CVE-2026-1731, to its Known Exploited ...
Cybersecurity
CANFAIL Malware Unveiled Amidst Russian Cyber Influence Allegations
A previously undocumented threat actor, possibly linked to Russian intelligence services, has been identified targeting Ukrainian defense, government, and energy sectors using CANFAIL malware, raising ...
Cybersecurity
Social Engineering Attack Compromises Fintech Company Figure’s Security
Fintech firm Figure confirmed a data breach following a social engineering attack that deceived an employee. The incident enabled hackers to gain access and steal ...
Application Security
Ivanti Endpoint Manager Mobile Critical Vulnerabilities Exploited by a Single Threat Actor
Cybersecurity experts have identified a single threat actor responsible for exploiting critical vulnerabilities in Ivanti Endpoint Manager Mobile. These vulnerabilities, CVE-2026-21962 and CVE-2026-24061, are actively ...
News
UAT-9921 Emerges with VoidLink to Challenge Technology and Financial Entities
The newly identified threat actor UAT-9921 is utilizing VoidLink, a sophisticated modular attack framework, to compromise technology and financial sectors, according to Cisco Talos.
Application Security
Dangerous Chrome Extensions Leak Personal Data and Track Users
A recent investigation revealed that over 300 Chrome extensions, collectively downloaded more than 37 million times, are involved in leaking or stealing user data. These ...
Cybersecurity
Trezor and Ledger Crypto Wallets Targeted by Mail Scam
Threat actors are exploiting trust in security hardware brands by sending fake letters impersonating Trezor and Ledger, targeting cryptocurrency users. This deception aims to collect ...
Application Security
Google Groups Exploited in Lumma Stealer Malware Campaign
Attackers are using Google Groups to distribute Lumma Stealer malware, targeting credentials across Windows and Linux platforms. They exploit Google services, deploying trojanized "Ninja Browser" ...
Cybersecurity
Malicious JavaScript Targets Cryptocurrency Users Via Pastebin
Cybercriminals employ a new strategy using Pastebin to execute ClickFix-style attacks, targeting cryptocurrency users’ Bitcoin transactions. The attackers use malicious JavaScript to hijack swaps, leading ...
Cybersecurity
Social Engineering Resurfaces: The ClickFix Attack Using DNS Lookups
Microsoft's research reveals a new iteration of the ClickFix tactic, exploiting DNS lookups for payload retrieval. This tactic employs the "nslookup" command in Windows to ...
Application Security
Texas-Based Financial Services Provider Marquis Cites SonicWall Breach for Ransomware Incident
Marquis Software Solutions suffered a ransomware attack in August 2025, impacting multiple banks. Rolling out explanations, the company attributes this compromise to a security flaw ...
CVE Vulnerability Alerts
SolarWinds Vulnerability Exploitation Prompts Immediate Response from Federal Agencies
Following the identification of a critical vulnerability in SolarWinds Web Help Desk, CISA has instructed federal agencies to patch their systems within three days. This ...
News
Everest Extortion Group and Iron Mountain Data Incident: Key Insights
Iron Mountain, a reputed data storage provider, has confirmed a breach by the Everest extortion group, affecting primarily marketing data. The company reassures clients of ...
Cybersecurity
RADICL Secures $31 Million to Boost Development of Autonomous vSOC
RADICL raises $31 million to enhance its virtual security operations center, aiming to revolutionize cybersecurity with autonomous threat detection features.
Cybersecurity
RapidFort Secures $42 Million to Enhance Software Security Automation
RapidFort has successfully raised $42 million in funding to further automate software supply chain security. This financial boost will aid the company in boosting its ...
Cybersecurity
UK Data Protection Authority Probes X’s Grok AI for Generating Inappropriate Images
The UK's data protection authority targets X's AI assistant, Grok, in a probe following claims of generating non-consensual sexual images. This investigation highlights data privacy ...
Application Security
CISA Adds PHP2Shell Flaws to KEV After Working Shells Hit Honeypots
TOP CYBERSECURITY HEADLINES
CVE Vulnerability Alerts
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
HashiCorp Patches CVSS 9.9 consul-k8s Flaw CVE-2026-110720
This Week’s Security Spotlight
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
CVE Vulnerability Alerts
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- AI Security
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
Integration of Criminal IP with IBM QRadar: Enhancing IP Threat Intelligence
Security operations centers (SOC) can enhance their threat detection capabilities with the integration of IP-based intelligence from Criminal IP into IBM's QRadar. This integration offers ...
CISA Catalog Includes BeyondTrust Flaw Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added a vulnerability in BeyondTrust RS and PRA, identified as CVE-2026-1731, to its Known Exploited ...
CANFAIL Malware Unveiled Amidst Russian Cyber Influence Allegations
A previously undocumented threat actor, possibly linked to Russian intelligence services, has been identified targeting Ukrainian defense, government, and energy sectors using CANFAIL malware, raising ...
Social Engineering Attack Compromises Fintech Company Figure’s Security
Fintech firm Figure confirmed a data breach following a social engineering attack that deceived an employee. The incident enabled hackers to gain access and steal ...
Ivanti Endpoint Manager Mobile Critical Vulnerabilities Exploited by a Single Threat Actor
Cybersecurity experts have identified a single threat actor responsible for exploiting critical vulnerabilities in Ivanti Endpoint Manager Mobile. These vulnerabilities, CVE-2026-21962 and CVE-2026-24061, are actively ...
UAT-9921 Emerges with VoidLink to Challenge Technology and Financial Entities
The newly identified threat actor UAT-9921 is utilizing VoidLink, a sophisticated modular attack framework, to compromise technology and financial sectors, according to Cisco Talos.
Dangerous Chrome Extensions Leak Personal Data and Track Users
A recent investigation revealed that over 300 Chrome extensions, collectively downloaded more than 37 million times, are involved in leaking or stealing user data. These ...
Trezor and Ledger Crypto Wallets Targeted by Mail Scam
Threat actors are exploiting trust in security hardware brands by sending fake letters impersonating Trezor and Ledger, targeting cryptocurrency users. This deception aims to collect ...
Google Groups Exploited in Lumma Stealer Malware Campaign
Attackers are using Google Groups to distribute Lumma Stealer malware, targeting credentials across Windows and Linux platforms. They exploit Google services, deploying trojanized "Ninja Browser" ...
Malicious JavaScript Targets Cryptocurrency Users Via Pastebin
Cybercriminals employ a new strategy using Pastebin to execute ClickFix-style attacks, targeting cryptocurrency users’ Bitcoin transactions. The attackers use malicious JavaScript to hijack swaps, leading ...
Social Engineering Resurfaces: The ClickFix Attack Using DNS Lookups
Microsoft's research reveals a new iteration of the ClickFix tactic, exploiting DNS lookups for payload retrieval. This tactic employs the "nslookup" command in Windows to ...
Texas-Based Financial Services Provider Marquis Cites SonicWall Breach for Ransomware Incident
Marquis Software Solutions suffered a ransomware attack in August 2025, impacting multiple banks. Rolling out explanations, the company attributes this compromise to a security flaw ...
SolarWinds Vulnerability Exploitation Prompts Immediate Response from Federal Agencies
Following the identification of a critical vulnerability in SolarWinds Web Help Desk, CISA has instructed federal agencies to patch their systems within three days. This ...
Everest Extortion Group and Iron Mountain Data Incident: Key Insights
Iron Mountain, a reputed data storage provider, has confirmed a breach by the Everest extortion group, affecting primarily marketing data. The company reassures clients of ...
RADICL Secures $31 Million to Boost Development of Autonomous vSOC
RADICL raises $31 million to enhance its virtual security operations center, aiming to revolutionize cybersecurity with autonomous threat detection features.
RapidFort Secures $42 Million to Enhance Software Security Automation
RapidFort has successfully raised $42 million in funding to further automate software supply chain security. This financial boost will aid the company in boosting its ...
UK Data Protection Authority Probes X’s Grok AI for Generating Inappropriate Images
The UK's data protection authority targets X's AI assistant, Grok, in a probe following claims of generating non-consensual sexual images. This investigation highlights data privacy ...
The DockerDash Vulnerability: Understanding Its Impact on Docker Desktop and CLI
Researchers recently identified a critical flaw named DockerDash in Ask Gordon. This AI assistant, integrated into Docker Desktop and CLI, exposed users to risks of ...
U.S. CISA’s Vulnerability Notice Revisions Spark Concerns
CISA silently updated 59 vulnerability notices in 2025 to indicate ransomware links. Experts argue transparency in such updates is vital for cybersecurity integrity.
React Native’s Metro Server Vulnerability: A Growing Cyber Threat
A critical flaw in React Native's Metro server is being exploited to propagate malware across Windows and Linux systems. The attacks, despite escalating in severity, ...