Cyber Security
Application Security
The DockerDash Vulnerability: Understanding Its Impact on Docker Desktop and CLI
Researchers recently identified a critical flaw named DockerDash in Ask Gordon. This AI assistant, integrated into Docker Desktop and CLI, exposed users to risks of ...
Cybersecurity
U.S. CISA’s Vulnerability Notice Revisions Spark Concerns
CISA silently updated 59 vulnerability notices in 2025 to indicate ransomware links. Experts argue transparency in such updates is vital for cybersecurity integrity.
Cybersecurity
React Native’s Metro Server Vulnerability: A Growing Cyber Threat
A critical flaw in React Native's Metro server is being exploited to propagate malware across Windows and Linux systems. The attacks, despite escalating in severity, ...
Cybersecurity
Reconnaissance Attack On Citrix NetScaler Targets Login Panels with Proxy Networks
A coordinated reconnaissance campaign used thousands of proxies to target Citrix NetScaler, aiming to pinpoint login panels. This marks a substantial cyber concern due to ...
Cybersecurity
State-Sponsored Cyber Espionage: Notepad++ Update Traffic Hijacked
Chinese hackers hijacked Notepad++ updates for months, claims the developer. State-sponsored involvement underlines cybersecurity challenges. Key details on tactics and duration shared.
Cybersecurity
Cybercriminals Exploit Weak Security in 1,400 MongoDB Servers
Over 1,400 MongoDB servers, lacking secure access controls, have been seized by hackers who wiped data and left ransom notes. Cybercriminals demanded $500 in Bitcoin ...
Application Security
Malicious VS Code Extensions Spread GlassWorm Loader
Hackers hijacked an account to publish harmful VS Code extensions, distributing the GlassWorm malware loader. This compromised open-source repositories impacting numerous users by embedding malicious ...
Cybersecurity
Surge in Fake Investment Platforms Exploiting Social Media
High-yield investment platforms are exploiting unsuspecting investors with promises of high returns. These scams, often resembling Ponzi schemes, use social media, recycled scripts, and referral ...
Cybersecurity
Fast Food Giant McDonald Calls for Creative Passwords to Enhance Security
McDonald's is urging individuals to enhance their cybersecurity by creating more complex passwords. This comes in light of "Change Your Password Day," emphasizing the importance ...
Cybersecurity
Identity Challenges in User Data Storage and Security Maintenance
The StopICE platform, focused on tracking immigration enforcement, faces scrutiny following claims of user data leaks instigated by a CBP agent. Learn about the complexities ...
CVE Vulnerability Alerts
Russian Hackers Exploit Vulnerability in Microsoft Office to Target Ukraine
Russian hackers exploited CVE-2026-21509 vulnerability in Microsoft Office targeting Ukrainian systems. CERT Ukraine urges immediate security updates as exploitation risk persists.
Application Security
Microsoft’s Strategy to Eliminate NTLM in Favor of Kerberos
Microsoft outlines its plan to discontinue NTLM, pushing for Kerberos-based solutions due to NTLM's vulnerability to attacks. Their strategy aims at enhanced security for Windows ...
Cybersecurity
ClawHub’s Third-Party Skills Security Risks: User Data at Stake
A security audit of ClawHub has uncovered 341 malicious skills out of an examined total of 2,857, raising significant concerns about supply chain risks for ...
Application Security
Firefox Introduces Options to Control AI Features
Mozilla is responding to user concerns by allowing control over AI features in Firefox's next update. Users can choose to disable these features entirely or ...
Application Security
Microsoft Acknowledges Shutdown Issue in Windows 10 and 11 Systems
Microsoft confirms a shutdown bug in Windows 11 also affects Windows 10 with Virtual Secure Mode enabled, impacting system operations.
Application Security
Increasing Threats from Automated Data Extortion Targeting MongoDB
A threat actor has launched automated attacks on MongoDB databases, exploiting weak security to extort low ransoms from victims for data restoration. This situation highlights ...
Cybersecurity
Apple Enhances Location Privacy With New Feature for iPhone and iPad
Apple's new privacy feature allows users to reduce the precision of location data shared with networks, bolstering privacy on select iPhone and iPad models. This ...
Application Security
Zero-Day Vulnerabilities in Ivanti EPMM Exploited
Ivanti has addressed two zero-day vulnerabilities in its Endpoint Manager Mobile (EPMM) following warnings from security experts about their active exploitation, raising significant threats to ...
News
Global Cloud Storage Scam Emails Threaten Users With False Data Deletion Alerts
A widespread phishing campaign has emerged, tricking users with fake alerts about impending deletion of their cloud storage files due to alleged payment failures. The ...
News
RedKitten Campaign Targets NGOs Amid Iranian Unrest
A group likely linked to Iranian state interests, RedKitten, targets NGOs working on human rights documentation. This activity arose during the nationwide unrest in Iran.
Application Security
CISA Adds PHP2Shell Flaws to KEV After Working Shells Hit Honeypots
TOP CYBERSECURITY HEADLINES
CVE Vulnerability Alerts
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
HashiCorp Patches CVSS 9.9 consul-k8s Flaw CVE-2026-110720
This Week’s Security Spotlight
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
CVE Vulnerability Alerts
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- AI Security
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
Reconnaissance Attack On Citrix NetScaler Targets Login Panels with Proxy Networks
A coordinated reconnaissance campaign used thousands of proxies to target Citrix NetScaler, aiming to pinpoint login panels. This marks a substantial cyber concern due to ...
State-Sponsored Cyber Espionage: Notepad++ Update Traffic Hijacked
Chinese hackers hijacked Notepad++ updates for months, claims the developer. State-sponsored involvement underlines cybersecurity challenges. Key details on tactics and duration shared.
Cybercriminals Exploit Weak Security in 1,400 MongoDB Servers
Over 1,400 MongoDB servers, lacking secure access controls, have been seized by hackers who wiped data and left ransom notes. Cybercriminals demanded $500 in Bitcoin ...
Malicious VS Code Extensions Spread GlassWorm Loader
Hackers hijacked an account to publish harmful VS Code extensions, distributing the GlassWorm malware loader. This compromised open-source repositories impacting numerous users by embedding malicious ...
Surge in Fake Investment Platforms Exploiting Social Media
High-yield investment platforms are exploiting unsuspecting investors with promises of high returns. These scams, often resembling Ponzi schemes, use social media, recycled scripts, and referral ...
Fast Food Giant McDonald Calls for Creative Passwords to Enhance Security
McDonald's is urging individuals to enhance their cybersecurity by creating more complex passwords. This comes in light of "Change Your Password Day," emphasizing the importance ...
Identity Challenges in User Data Storage and Security Maintenance
The StopICE platform, focused on tracking immigration enforcement, faces scrutiny following claims of user data leaks instigated by a CBP agent. Learn about the complexities ...
Russian Hackers Exploit Vulnerability in Microsoft Office to Target Ukraine
Russian hackers exploited CVE-2026-21509 vulnerability in Microsoft Office targeting Ukrainian systems. CERT Ukraine urges immediate security updates as exploitation risk persists.
Microsoft’s Strategy to Eliminate NTLM in Favor of Kerberos
Microsoft outlines its plan to discontinue NTLM, pushing for Kerberos-based solutions due to NTLM's vulnerability to attacks. Their strategy aims at enhanced security for Windows ...
ClawHub’s Third-Party Skills Security Risks: User Data at Stake
A security audit of ClawHub has uncovered 341 malicious skills out of an examined total of 2,857, raising significant concerns about supply chain risks for ...
Firefox Introduces Options to Control AI Features
Mozilla is responding to user concerns by allowing control over AI features in Firefox's next update. Users can choose to disable these features entirely or ...
Microsoft Acknowledges Shutdown Issue in Windows 10 and 11 Systems
Microsoft confirms a shutdown bug in Windows 11 also affects Windows 10 with Virtual Secure Mode enabled, impacting system operations.
Increasing Threats from Automated Data Extortion Targeting MongoDB
A threat actor has launched automated attacks on MongoDB databases, exploiting weak security to extort low ransoms from victims for data restoration. This situation highlights ...
Apple Enhances Location Privacy With New Feature for iPhone and iPad
Apple's new privacy feature allows users to reduce the precision of location data shared with networks, bolstering privacy on select iPhone and iPad models. This ...
Zero-Day Vulnerabilities in Ivanti EPMM Exploited
Ivanti has addressed two zero-day vulnerabilities in its Endpoint Manager Mobile (EPMM) following warnings from security experts about their active exploitation, raising significant threats to ...
Global Cloud Storage Scam Emails Threaten Users With False Data Deletion Alerts
A widespread phishing campaign has emerged, tricking users with fake alerts about impending deletion of their cloud storage files due to alleged payment failures. The ...
RedKitten Campaign Targets NGOs Amid Iranian Unrest
A group likely linked to Iranian state interests, RedKitten, targets NGOs working on human rights documentation. This activity arose during the nationwide unrest in Iran.
Targeted Vishing Attacks Amplify ShinyHunters’s SaaS Data Breaches
ShinyHunters group intensifies SaaS data breaches, leveraging voice phishing and custom phishing sites to harvest SSO credentials and tap multi-factor authentication.
Instagram’s Privacy Controls Data Exposure: Review of Recent Findings
A researcher found that Instagram's private accounts were not as secure as users believed, exposing photo links to unauthorized visitors. Despite the issue being fixed, ...
Former Google Engineer Found Guilty of Stealing AI Data for Chinese Firms
A federal jury recently found Linwei Ding, an ex-Google software engineer, guilty of misappropriating AI supercomputer project data for Chinese tech companies. This case highlights ...