Cyber Security
Cybersecurity
Vulnerabilities in Dormakaba Systems Expose Security Flaws
Dormakaba's access control systems exhibited significant vulnerabilities, leading to security risks at major European firms. Over 20 flaws, including six critical ones, allowed unauthorized access ...
Cybersecurity
EU Investigates AI Risk Management: Scrutiny Over Grok AI’s Content Generation
The European Commission launches an investigation into X's Grok AI, questioning the company's risk assessment process following its controversial use in generating explicit imagery. This ...
Cybersecurity
Cloudflare Analyzes the Impact of a Recent BGP Route Leak
Cloudflare recently detailed a BGP route leak lasting 25 minutes. The incident resulted in noticeable network disruptions, with packet loss and roughly 12 Gbps of ...
Application Security
Microsoft’s Out-of-Band Updates Resolve Microsoft Outlook Issue With Cloud-Hosted PST Files
Microsoft has issued crucial out-of-band updates for Windows 10, Windows 11, and Windows Server to address a specific problem affecting Microsoft Outlook. This issue resulted ...
News
The ShinyHunters and Their Voice Phishing Tactics Target Okta, Microsoft, and Google
ShinyHunters are deploying voice phishing to breach SSO accounts and access corporate data in platforms like Okta, Microsoft, and Google. This tactic aids in stealing ...
Application Security
Windows 11 Boot Failures After Patch Tuesday Updates
Recent updates from January 2026 rendered some Windows 11 devices unusable, throwing an “UNMOUNTABLE_BOOT_VOLUME” error. Microsoft is actively examining these issues and working on a ...
Cybersecurity
US Cybersecurity Agency Opts Out of RSA Conference While Jen Easterly Plans Attendance
The US Cybersecurity and Infrastructure Security Agency (CISA) confirmed it will not be attending the upcoming RSA Conference in March. However, new RSA CEO and ...
News
Osiris Ransomware Disables Security Tools in Novel Attack
Researchers have uncovered the Osiris ransomware, deployed in a late 2025 cyberattack targeting a Southeast Asian food service franchise. Utilizing BYOVD tactics and exploiting the ...
Cybersecurity
UK Home Office Invests Heavily in Tech to Mitigate Channel Immigration Challenges
The UK Home Office embarks on a £100 million investment in cutting-edge technology to address the complex challenges posed by the influx of small boats ...
CVE Vulnerability Alerts
CISA Identifies Critical Broadcom VMware vCenter Vulnerability CVE-2024-37079
CISA has added a significant vulnerability, CVE-2024-37079, found in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalog. This move emphasizes the critical nature ...
Cybersecurity
Nike Investigates Breach as Hackers Threaten Data Disclosure
Nike is investigating a possible security breach as the WorldLeaks cybercrime group claims to have accessed and stolen sensitive data. The hackers are threatening to ...
News
Multi-Stage Phishing Campaign Targets Russia With Ransomware and Amnesia RAT
A sophisticated phishing operation has emerged in Russia, deploying ransomware and Amnesia RAT through business-themed documents. Attackers ingeniously disguise malware as routine files, posing a ...
News
North Korean Hacker Group Deploys AI-Powered Malware Targeting Blockchain Developers
The North Korean APT group known as Konni has refined its strategies by employing AI-driven malware to specifically target developers in the blockchain industry. This ...
Cybersecurity
Major Cyber Assault by Sandworm Against Poland’s Grid Averted
In a significant report, Poland's energy minister disclosed an attempted cyber attack by Sandworm on the nation's power infrastructure. The offensive, deemed the most extensive ...
Application Security
Microsoft Investigates Outlook Crashing on iPad Devices due to Coding Error
Microsoft has confirmed a coding error in the Outlook mobile app that may cause it to crash on iPad devices. The bug significantly impacts users ...
Cybersecurity
Emerging Threats: Cloudflare WAF Bypass and Snap Store Malware
Recent developments in cybersecurity reveal a Cloudflare WAF bypass, Cannonical's Snap Store malware, and the termination of Curl's bug bounty program. Explore how these issues ...
Cybersecurity
Fortinet’s FortiCloud SSO Exploitation Raises Concerns Despite Patches
Concerns have arisen following the recent identification of exploitation attempts targeting Fortinet's FortiCloud single sign-on (SSO) capabilities. Even though patches were released, attackers have leveraged ...
Cybersecurity
Automation in Cyberattacks: A New Era for CISOs to Prepare For
Cybercriminals are on the brink of automating their attack workflows end-to-end. CISOs need to anticipate and prepare for these changes to effectively defend against increasingly ...
Application Security
Malicious VSCode Extensions Infiltrate Marketplace
Two rogue extensions in Microsoft's Visual Studio Code (VSCode) Marketplace have been identified, accumulating 1.5 million installations. These extensions are designed to exfiltrate sensitive developer ...
Cybersecurity
New CISA Alert: Active Exploitation of Critical Vulnerabilities in Enterprise Tools
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert about the active exploitation of vulnerabilities in software from Versa, Zimbra, the Vite frontend ...
Application Security
CISA Adds PHP2Shell Flaws to KEV After Working Shells Hit Honeypots
TOP CYBERSECURITY HEADLINES
CVE Vulnerability Alerts
Researcher Publishes 11 Unpatched Tailscale and Headscale Flaws
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
HashiCorp Patches CVSS 9.9 consul-k8s Flaw CVE-2026-110720
This Week’s Security Spotlight
CVE Vulnerability Alerts
Apple Backports Exploited CoreGraphics Zero-Day Fix to iOS 18
Application Security
GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw CVE-2026-110264
CVE Vulnerability Alerts
Okta Patches Four Access Gateway Flaws Including CVSS 9.1 Bug
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- AI Security
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
Microsoft’s Out-of-Band Updates Resolve Microsoft Outlook Issue With Cloud-Hosted PST Files
Microsoft has issued crucial out-of-band updates for Windows 10, Windows 11, and Windows Server to address a specific problem affecting Microsoft Outlook. This issue resulted ...
The ShinyHunters and Their Voice Phishing Tactics Target Okta, Microsoft, and Google
ShinyHunters are deploying voice phishing to breach SSO accounts and access corporate data in platforms like Okta, Microsoft, and Google. This tactic aids in stealing ...
Windows 11 Boot Failures After Patch Tuesday Updates
Recent updates from January 2026 rendered some Windows 11 devices unusable, throwing an “UNMOUNTABLE_BOOT_VOLUME” error. Microsoft is actively examining these issues and working on a ...
US Cybersecurity Agency Opts Out of RSA Conference While Jen Easterly Plans Attendance
The US Cybersecurity and Infrastructure Security Agency (CISA) confirmed it will not be attending the upcoming RSA Conference in March. However, new RSA CEO and ...
Osiris Ransomware Disables Security Tools in Novel Attack
Researchers have uncovered the Osiris ransomware, deployed in a late 2025 cyberattack targeting a Southeast Asian food service franchise. Utilizing BYOVD tactics and exploiting the ...
UK Home Office Invests Heavily in Tech to Mitigate Channel Immigration Challenges
The UK Home Office embarks on a £100 million investment in cutting-edge technology to address the complex challenges posed by the influx of small boats ...
CISA Identifies Critical Broadcom VMware vCenter Vulnerability CVE-2024-37079
CISA has added a significant vulnerability, CVE-2024-37079, found in Broadcom VMware vCenter Server to its Known Exploited Vulnerabilities catalog. This move emphasizes the critical nature ...
Nike Investigates Breach as Hackers Threaten Data Disclosure
Nike is investigating a possible security breach as the WorldLeaks cybercrime group claims to have accessed and stolen sensitive data. The hackers are threatening to ...
Multi-Stage Phishing Campaign Targets Russia With Ransomware and Amnesia RAT
A sophisticated phishing operation has emerged in Russia, deploying ransomware and Amnesia RAT through business-themed documents. Attackers ingeniously disguise malware as routine files, posing a ...
North Korean Hacker Group Deploys AI-Powered Malware Targeting Blockchain Developers
The North Korean APT group known as Konni has refined its strategies by employing AI-driven malware to specifically target developers in the blockchain industry. This ...
Major Cyber Assault by Sandworm Against Poland’s Grid Averted
In a significant report, Poland's energy minister disclosed an attempted cyber attack by Sandworm on the nation's power infrastructure. The offensive, deemed the most extensive ...
Microsoft Investigates Outlook Crashing on iPad Devices due to Coding Error
Microsoft has confirmed a coding error in the Outlook mobile app that may cause it to crash on iPad devices. The bug significantly impacts users ...
Emerging Threats: Cloudflare WAF Bypass and Snap Store Malware
Recent developments in cybersecurity reveal a Cloudflare WAF bypass, Cannonical's Snap Store malware, and the termination of Curl's bug bounty program. Explore how these issues ...
Fortinet’s FortiCloud SSO Exploitation Raises Concerns Despite Patches
Concerns have arisen following the recent identification of exploitation attempts targeting Fortinet's FortiCloud single sign-on (SSO) capabilities. Even though patches were released, attackers have leveraged ...
Automation in Cyberattacks: A New Era for CISOs to Prepare For
Cybercriminals are on the brink of automating their attack workflows end-to-end. CISOs need to anticipate and prepare for these changes to effectively defend against increasingly ...
Malicious VSCode Extensions Infiltrate Marketplace
Two rogue extensions in Microsoft's Visual Studio Code (VSCode) Marketplace have been identified, accumulating 1.5 million installations. These extensions are designed to exfiltrate sensitive developer ...
New CISA Alert: Active Exploitation of Critical Vulnerabilities in Enterprise Tools
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert about the active exploitation of vulnerabilities in software from Versa, Zimbra, the Vite frontend ...
Venezuelan Nationals Convicted in ATM Jackpotting Scheme to Face Deportation
Two Venezuelan nationals convicted for an ATM jackpotting scheme will be deported after serving prison sentences. The scheme involved sophisticated cyber tactics to exploit ATM ...
ShinyHunters Claims Responsibility for Recent Okta Phishing Attack
ShinyHunters has taken credit for a phishing operation targeting Okta's platform, reportedly compromising Crunchbase and Betterment systems. This breach has potentially far-reaching consequences for security ...
Popular Curl Project Discontinues Bug Bounty Program due to Poor Quality Reports
Curl is terminating its bug bounty on HackerOne due to the burden of AI-generated reports. The increase in low-quality submissions has made managing the program ...