Cyber Security
Cybersecurity
Figure Data Breach Exposes Nearly 1 Million User Records
Blockchain lender Figure confirms data breach with over 2GB of user information leaked by ShinyHunters.
News
Cybercriminals Exploit OAuth 2.0 Device Authorization Flow in Vishing Campaigns
Hackers target tech, manufacturing, and finance sectors using device code phishing and vishing in OAuth 2.0 abuse campaigns.
Cybersecurity
Texas Sues TP-Link Over Router Security Deception Tied to Chinese State-Backed Hackers
Texas accuses TP-Link of falsely advertising its routers' security, allowing Chinese state-backed hackers to exploit firmware vulnerabilities and acce...
Cybersecurity
DEF CON Bars Three Men Named in Epstein Documents
DEF CON bans three men linked to Epstein files, raising important questions about ethics and attendee policies at major cybersecurity conferences.
Cybersecurity
Ivanti Zero-Day Exploitation Peaks as Cyber Threats Surge
Surge in Ivanti zero-day vulnerability exploits traced back to July 2025.
Cybersecurity
Nigerian Hacker Gets Eight-Year Prison Sentence for Tax Fraud
A Nigerian national has been sentenced to eight years in prison for hacking into tax preparation firms and submitting $8.1 million in fraudulent tax r...
News
Germany Warns of Phishing Threats via Signal Targeting High-Profile Individuals
Germany's cyber authorities have alerted citizens about a sophisticated phishing attack using Signal. High-ranking officials, journalists, and politicians are prime targets. This advisory emphasizes the ...
Cybersecurity
Chinese Cyber Espionage Group Exploits Dell Security Vulnerability
Chinese state-backed hackers have been identified exploiting a Dell security flaw in a series of zero-day attacks since mid-2024. These attacks underline concerns regarding the ...
Cybersecurity
Cybercriminals Create Impersonated Oura MCP Server to Deploy StealC Info-Stealer
Cybercriminals replicated a legitimate Oura MCP server in a deceptive campaign to distribute StealC malware. STAR Labs discovered the SmartLoader operation, presenting crucial cybersecurity insights.
Cybersecurity
VulnCheck Secures $25 Million to Enhance Vulnerability Intelligence
VulnCheck, a company specializing in vulnerability intelligence, has successfully raised $25 million in a Series B funding round. The investment, led by Sorenson Capital, demonstrates ...
Application Security
Notepad++ Bolsters Security With New Double-lock Update System
After a recent supply-chain attack, Notepad++ has revamped its update mechanism with a double-lock design. This new approach is intended to tighten security and prevent ...
Cybersecurity
AI Assistants as Covert C2 Tools: Implications for Enterprise Security
Cybersecurity experts have found methods to transform AI assistants with web capabilities into covert command-and-control (C2) tools. Such exploits could let attackers mask their activities ...
Cybersecurity
Unveiling the Extent of Leaked API Keys in Front-End Applications
Intruder's comprehensive scan of JavaScript bundles across 5 million applications reveals a staggering number of exposed API keys, uncovering a critical security threat.
Application Security
Microsoft Teams Service Outage Frustrates Users Worldwide
Microsoft Teams has been experiencing an ongoing outage worldwide that has led to significant delays and access issues. Users are frustrated by these disruptions, with ...
News
Polish Authorities Detain Suspected Phobos Ransomware Operative
Polish authorities have arrested a 47-year-old man suspected of participating in cybercrimes associated with the Phobos ransomware. During the operation, officers seized devices containing evidence ...
Cybersecurity
Millions of Eurail User Records at Stake as Hackers Threaten Sale
Hackers claim to have stolen millions of Eurail user records and are reportedly offering these for sale. Eurail is currently trying to gauge the breach's ...
Cybersecurity
Rise in API Exploitation Driven by Weak Security and Enhanced AI Capabilities
New research details the growing misuse of APIs by attackers leveraging machine speed and AI capabilities. Enhanced API attacks increase exposure and amplify impact, indicating ...
Cybersecurity
Allegations of Data Violations by Lenovo: US Law Firm Raises Concerns
Lenovo is under scrutiny as a US law firm alleges the company breached DOJ guidelines concerning data transfers to foreign adversaries, specifically China. Lenovo has ...
Cybersecurity
New Android Malware Identified in Device Firmware Raising Alarms
Android malware known as Keenadu has been discovered within the firmware of various brands, enabling it to breach installed apps and seize control of affected ...
Cybersecurity
Italian University Struggles With Disruption After Cyberattack
Rome’s La Sapienza University, a key academic institution in Italy, has been grappling with severe disruptions following a significant cyberattack on February 2. This attack ...
CVE Vulnerability Alerts
PHP2Shell Attacks on Check Point Gateways Deploy TSGA, ESXi Wiper
TOP CYBERSECURITY HEADLINES
CVE Vulnerability Alerts
Citrix Patches 28 NetScaler Flaws and Critical Console Auth Bypass
This Week’s Security Spotlight
CVE Vulnerability Alerts
Barracuda Flaws CVE-2026-116606 and CVE-2026-111560 Exploited
CVE Vulnerability Alerts
Intel and AMD Patch Over 200 Vulnerabilities in November Updates
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Cyber Security News
- All
- AI Security
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
DEF CON Bars Three Men Named in Epstein Documents
DEF CON bans three men linked to Epstein files, raising important questions about ethics and attendee policies at major cybersecurity conferences.
Ivanti Zero-Day Exploitation Peaks as Cyber Threats Surge
Surge in Ivanti zero-day vulnerability exploits traced back to July 2025.
Nigerian Hacker Gets Eight-Year Prison Sentence for Tax Fraud
A Nigerian national has been sentenced to eight years in prison for hacking into tax preparation firms and submitting $8.1 million in fraudulent tax r...
Germany Warns of Phishing Threats via Signal Targeting High-Profile Individuals
Germany's cyber authorities have alerted citizens about a sophisticated phishing attack using Signal. High-ranking officials, journalists, and politicians are prime targets. This advisory emphasizes the ...
Chinese Cyber Espionage Group Exploits Dell Security Vulnerability
Chinese state-backed hackers have been identified exploiting a Dell security flaw in a series of zero-day attacks since mid-2024. These attacks underline concerns regarding the ...
Cybercriminals Create Impersonated Oura MCP Server to Deploy StealC Info-Stealer
Cybercriminals replicated a legitimate Oura MCP server in a deceptive campaign to distribute StealC malware. STAR Labs discovered the SmartLoader operation, presenting crucial cybersecurity insights.
VulnCheck Secures $25 Million to Enhance Vulnerability Intelligence
VulnCheck, a company specializing in vulnerability intelligence, has successfully raised $25 million in a Series B funding round. The investment, led by Sorenson Capital, demonstrates ...
Notepad++ Bolsters Security With New Double-lock Update System
After a recent supply-chain attack, Notepad++ has revamped its update mechanism with a double-lock design. This new approach is intended to tighten security and prevent ...
AI Assistants as Covert C2 Tools: Implications for Enterprise Security
Cybersecurity experts have found methods to transform AI assistants with web capabilities into covert command-and-control (C2) tools. Such exploits could let attackers mask their activities ...
Unveiling the Extent of Leaked API Keys in Front-End Applications
Intruder's comprehensive scan of JavaScript bundles across 5 million applications reveals a staggering number of exposed API keys, uncovering a critical security threat.
Microsoft Teams Service Outage Frustrates Users Worldwide
Microsoft Teams has been experiencing an ongoing outage worldwide that has led to significant delays and access issues. Users are frustrated by these disruptions, with ...
Polish Authorities Detain Suspected Phobos Ransomware Operative
Polish authorities have arrested a 47-year-old man suspected of participating in cybercrimes associated with the Phobos ransomware. During the operation, officers seized devices containing evidence ...
Millions of Eurail User Records at Stake as Hackers Threaten Sale
Hackers claim to have stolen millions of Eurail user records and are reportedly offering these for sale. Eurail is currently trying to gauge the breach's ...
Rise in API Exploitation Driven by Weak Security and Enhanced AI Capabilities
New research details the growing misuse of APIs by attackers leveraging machine speed and AI capabilities. Enhanced API attacks increase exposure and amplify impact, indicating ...
Allegations of Data Violations by Lenovo: US Law Firm Raises Concerns
Lenovo is under scrutiny as a US law firm alleges the company breached DOJ guidelines concerning data transfers to foreign adversaries, specifically China. Lenovo has ...
New Android Malware Identified in Device Firmware Raising Alarms
Android malware known as Keenadu has been discovered within the firmware of various brands, enabling it to breach installed apps and seize control of affected ...
Italian University Struggles With Disruption After Cyberattack
Rome’s La Sapienza University, a key academic institution in Italy, has been grappling with severe disruptions following a significant cyberattack on February 2. This attack ...
The Rise of TGR-STA-1030: The Global ‘Shadow Campaigns’ Targeting Government Infrastructure
A new cyberespionage group, TGR-STA-1030/UNC6619, known for its "Shadow Campaigns," has targeted government infrastructure in 155 countries, highlighting a new global threat landscape.
DKnife Toolkit: A Persistent Threat to Network Security
DKnife is a powerful Linux-based toolkit used by cybercriminals to hijack router traffic, allowing them to monitor and manipulate data. Discovered by Cisco Talos, it ...
Lema AI Secures $24 Million to Bolster Supply Chain Security
Lema AI exits stealth mode, securing $24M in funding across Series A and seed rounds, aimed at advancing its supply chain security platform.