Cyber Security
News
Authorities in Spain Dismantle Cyber Fraud Network Tied to Black Axe Group
Officials in Spain apprehended 34 individuals linked to a sophisticated cyber fraud organization. Suspected of affiliations with the notorious Black Axe group, these arrests are ...
Data Security
Ireland Recalls Thousands of Passports Due to Software-Induced Printing Defect
Ireland's Foreign Affairs Department has recalled 13,000 passports after a software update led to a printing issue, rendering them non-compliant with international standards and potentially ...
Application Security
BreachForums Re-emerges Only to Fall Victim to Data Breach
The latest iteration of BreachForums, a well-known hacking community, has suffered a data breach with its user database leaked online. The breach occurred despite recent ...
Cybersecurity
Anthropic Responds to Viral Allegations of Account Bans
Anthropic, the company behind Claude AI, addresses allegations of unauthorized account bans. The viral post on X stirred significant discussion among users.
News
Iranian APT Group MuddyWater Launches Sophisticated Spear-Phishing Campaign
MuddyWater, an Iranian threat actor, is running a spear-phishing campaign targeting multiple sectors in the Middle East using Rust-based implants. The attack leverages icon spoofing ...
Cybersecurity
CISA Streamlines Security Measures With Vulnerability Catalog Adoption
The Cybersecurity and Infrastructure Security Agency (CISA) officially retired 10 emergency directives, transferring security focus toward the Known Exploited Vulnerabilities catalog, which offers a more ...
Application Security
Chinese-Speaking Threat Actors Allegedly Exploit SonicWall VPN for VMware ESXi Breach
Using a compromised SonicWall VPN device, Chinese-speaking hackers allegedly targeted a VMware ESXi system with a potential exploit dating back to February 2024. The cybersecurity ...
News
Illinois Man Charged for Snapchat Phishing Scheme
An Illinois individual faces charges for a phishing scam that compromised approximately 600 Snapchat accounts. The scheme involved stealing private photos of women.
Blog
Email Security’s True Challenge: Evaluating Post-access Threats
While click rates often dominate phishing discussions, real threats emerge post-compromise. Material Security advocates prioritizing containment strategies and examining post-access activities to enhance email security ...
Cybersecurity
APT28 Intensifies Credential Harvesting on Nuclear and Energy Sectors
Russian threat actors APT28 target Turkish energy sectors and European think tanks with credential-stealing attacks, focusing on nuclear research. North Macedonia and Uzbekistan agencies also ...
News
Diplomatic Exchange Between Nations Highlights Tensions in Cybercrime Prosecutions
A geopolitical exchange took place involving France, the US, and Russia, resulting in the release of an alleged ransomware figure in return for a Swiss ...
Cybersecurity
NSA Announces Tim Kosiba as New Deputy Director
Tim Kosiba, with over three decades in the Intelligence Community, has been appointed as the NSA's Deputy Director. His extensive background in federal service makes ...
Endpoint Security
Threat Actors Target Vulnerable Proxy Servers in the Hunt for LLM Services
Cybercriminals are exploiting vulnerabilities in proxy servers, seeking unauthorized access to commercial large language models, posing significant cybersecurity concerns.
News
North Korean Hackers Exploit QR Codes to Breach Enterprise Cloud Security
North Korean state-sponsored cyber actors leverage QR codes to bypass enterprise security systems, gaining unauthorized access to cloud platforms. The FBI highlights these tactics in ...
Data Security
Illinois Department’s Database Error Leads to Massive Data Exposure
The Illinois Department of Human Services recently disclosed a significant data breach affecting approximately 700,000 residents. A misconfigured privacy setting was identified as the cause, ...
Cybersecurity
Trend Micro Addresses Vulnerabilities in Apex Central, Mitigates Security Risks
Security company Trend Micro has resolved three critical vulnerabilities in its Apex Central management console, disclosed by Tenable. These issues, identified as CVE-2025-69258, CVE-2025-69259, and ...
Endpoint Security
Vulnerability in Totolink Range Extender Firmware Allows Unauthorized Access
Totolink range extenders are at risk due to a firmware bug that leads to unauthenticated root-level Telnet service, allowing potential device takeovers. Security researchers encourage ...
Cybersecurity
Vibe Hacking: How AI is Transforming Cybercrime’s Landscape
The evolution of cybercrime from skill-based activities to AI-driven "vibe hacking" is reshaping attack strategies. By utilizing AI tools, cybercriminals gain access to advanced capabilities ...
Blog
How Misconfigured Email Routing Opens the Door for Credential Theft
Misconfigured email routing creates an opening for attackers using Phishing-as-a-Service platforms like Tycoon2FA to steal credentials. Such tactics enable attackers to replicate legitimate internal emails, ...
Application Security
Logitech’s macOS Applications Disrupted by Expired Code-Signing Certificate
Logitech's macOS applications, Options+ and G Hub, faced functionality issues after their code-signing certificate expired, preventing users from launching the apps on Apple systems. This ...
Application Security
Rejetto HFS Flaw Lets Hackers Forge Admin Sessions for RCE
TOP CYBERSECURITY HEADLINES
Cybersecurity
Nikkei Discloses M365 Breach, 9,000 Spoofed Emails Sent
Application Security
Google Pauses Open-Source Bug Bounty Over AI Report Flood
CVE Vulnerability Alerts
Critical FortiMail Zero-Day Exploited With No Patch Yet
This Week’s Security Spotlight
Application Security
Google Pauses Open-Source Bug Bounty Over AI Report Flood
Cybersecurity
FTC Confirms Probe Into OpenAI, Anthropic AI Agents
Cybersecurity
CSuite Phishing Campaign Hijacks Microsoft 365 Sessions
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
Anthropic Responds to Viral Allegations of Account Bans
Anthropic, the company behind Claude AI, addresses allegations of unauthorized account bans. The viral post on X stirred significant discussion among users.
Iranian APT Group MuddyWater Launches Sophisticated Spear-Phishing Campaign
MuddyWater, an Iranian threat actor, is running a spear-phishing campaign targeting multiple sectors in the Middle East using Rust-based implants. The attack leverages icon spoofing ...
CISA Streamlines Security Measures With Vulnerability Catalog Adoption
The Cybersecurity and Infrastructure Security Agency (CISA) officially retired 10 emergency directives, transferring security focus toward the Known Exploited Vulnerabilities catalog, which offers a more ...
Chinese-Speaking Threat Actors Allegedly Exploit SonicWall VPN for VMware ESXi Breach
Using a compromised SonicWall VPN device, Chinese-speaking hackers allegedly targeted a VMware ESXi system with a potential exploit dating back to February 2024. The cybersecurity ...
Illinois Man Charged for Snapchat Phishing Scheme
An Illinois individual faces charges for a phishing scam that compromised approximately 600 Snapchat accounts. The scheme involved stealing private photos of women.
Email Security’s True Challenge: Evaluating Post-access Threats
While click rates often dominate phishing discussions, real threats emerge post-compromise. Material Security advocates prioritizing containment strategies and examining post-access activities to enhance email security ...
APT28 Intensifies Credential Harvesting on Nuclear and Energy Sectors
Russian threat actors APT28 target Turkish energy sectors and European think tanks with credential-stealing attacks, focusing on nuclear research. North Macedonia and Uzbekistan agencies also ...
Diplomatic Exchange Between Nations Highlights Tensions in Cybercrime Prosecutions
A geopolitical exchange took place involving France, the US, and Russia, resulting in the release of an alleged ransomware figure in return for a Swiss ...
NSA Announces Tim Kosiba as New Deputy Director
Tim Kosiba, with over three decades in the Intelligence Community, has been appointed as the NSA's Deputy Director. His extensive background in federal service makes ...
Threat Actors Target Vulnerable Proxy Servers in the Hunt for LLM Services
Cybercriminals are exploiting vulnerabilities in proxy servers, seeking unauthorized access to commercial large language models, posing significant cybersecurity concerns.
North Korean Hackers Exploit QR Codes to Breach Enterprise Cloud Security
North Korean state-sponsored cyber actors leverage QR codes to bypass enterprise security systems, gaining unauthorized access to cloud platforms. The FBI highlights these tactics in ...
Illinois Department’s Database Error Leads to Massive Data Exposure
The Illinois Department of Human Services recently disclosed a significant data breach affecting approximately 700,000 residents. A misconfigured privacy setting was identified as the cause, ...
Trend Micro Addresses Vulnerabilities in Apex Central, Mitigates Security Risks
Security company Trend Micro has resolved three critical vulnerabilities in its Apex Central management console, disclosed by Tenable. These issues, identified as CVE-2025-69258, CVE-2025-69259, and ...
Vulnerability in Totolink Range Extender Firmware Allows Unauthorized Access
Totolink range extenders are at risk due to a firmware bug that leads to unauthenticated root-level Telnet service, allowing potential device takeovers. Security researchers encourage ...
Vibe Hacking: How AI is Transforming Cybercrime’s Landscape
The evolution of cybercrime from skill-based activities to AI-driven "vibe hacking" is reshaping attack strategies. By utilizing AI tools, cybercriminals gain access to advanced capabilities ...
How Misconfigured Email Routing Opens the Door for Credential Theft
Misconfigured email routing creates an opening for attackers using Phishing-as-a-Service platforms like Tycoon2FA to steal credentials. Such tactics enable attackers to replicate legitimate internal emails, ...
Logitech’s macOS Applications Disrupted by Expired Code-Signing Certificate
Logitech's macOS applications, Options+ and G Hub, faced functionality issues after their code-signing certificate expired, preventing users from launching the apps on Apple systems. This ...
Ni8mare Vulnerability Threatens N8N Workflow Automation Platform
A critical vulnerability discovered in the N8N workflow automation platform enables remote, unauthenticated attackers to gain control over systems. Details emerge on this severe risk, ...
Black Cat’s SEO Poisoning Tactics Target Software Downloaders
The Black Cat cybercrime group is leveraging fraudulent software download sites in a new SEO-driven attack campaign, delivering backdoor malware. The tactic involves SEO poisoning ...
OwnCloud Urges Users to Implement Multi-factor Authentication for Enhanced Security
OwnCloud recommends multi-factor authentication to prevent unauthorized access to user data via compromised credentials. This security measure adds an essential layer, mitigating the risk of ...