Microsoft Teams Exploited to Distribute Custom Snow Malware
A threat group tracked as UNC6692 uses social engineering to deploy a new, custom malware suite named 'Snow' which includes a browser extension, a tunneler, and
Cybersecurity
673 articles
Critical SGLang Vulnerability Exposes Systems to Remote Code Execution
A critical security vulnerability has been disclosed in SGLang that, if successfully exploited, could result in remote code execution on susceptible systems. Th
ADT Confirms Data Breach Following ShinyHunters Extortion Threat
Home security giant ADT has confirmed a data breach after the ShinyHunters extortion group threatened to leak stolen data unless a ransom is paid. [...]
Attackers Exploit Trusted Tools to Breach Systems
Monday’s recap shows the same pattern in different places. A third-party tool becomes a way in, then leads to internal access. A trusted download path is briefl
BlackFile Extortion Group Escalates Vishing Campaign
A new financially motivated hacking group tracked as BlackFile has been linked to a wave of data theft and extortion attacks against retail and hospitality orga
Why AI Projects Fail After the Initial Demo Phase
The fastest way to fall in love with an AI tool is to watch the demo. Everything moves quickly. Prompts land cleanly. The system produces impressive outputs in
Firestarter Malware Persists Despite Cisco Security Patches
Cybersecurity agencies in the U.S. and U.K. are warning about a custom malware called Firestarter persisting on Cisco Firepower and Secure Firewall devices runn
ZionSiphon Malware Targets Israeli Water Infrastructure
Cybersecurity researchers have flagged a new malware called ZionSiphon that appears to be specifically designed to target Israeli water treatment and desalinati
Microsoft Enhances Windows Update with New Restart Controls
Microsoft is rolling out Windows Update improvements that give users more control over how updates are installed while reducing disruption from frequent or poor
Critical Design Flaw in Model Context Protocol Risks AI Supply Chain
Cybersecurity researchers have discovered a critical "by design" weakness in the Model Context Protocol's (MCP) architecture that could pave the way for remote
Microsoft Brings Passkey Authentication to Windows Entra
Microsoft will roll out passkey support for phishing-resistant passwordless authentication to Microsoft Entra‑protected resources from Windows devices starting
Vercel Confirms Breach Linked to Third-Party AI Tool
Web infrastructure provider Vercel has disclosed a security breach that allows bad actors to gain unauthorized access to "certain" internal Vercel systems. The
Critical Linux Vulnerability Allows Unauthorized Root Access
A new vulnerability dubbed Pack2TheRoot could be exploited in the PackageKit daemon to allow local Linux users to install or remove system packages and gain roo
Sanctioned Crypto Exchange Grinex Shuts Down After $13.74M Hack
Grinex, a Kyrgyzstan-incorporated cryptocurrency exchange sanctioned by the U.K. and the U.S. last year, said it's suspending operations after it blamed Western
DORA's Article 9: Why Credential Management Is Now EU Financial Law
Article 9 of DORA makes authentication and access control a legal obligation for EU financial entities. Here is what the regulation requires, and what a breach
Nexcorium Mirai Variant Targets DVRs in Growing Botnet Campaign
Threat actors are exploiting security flaws in TBK DVR and end‑of‑life (EoL) TP-Link Wi-Fi routers to deploy Mirai-botnet variants on compromised devices, accor
10,000+ Zimbra Servers Face Active XSS Attack Threat
Over 10,000 Zimbra Collaboration Suite (ZCS) instances exposed online are vulnerable to ongoing attacks exploiting a cross-site scripting (XSS) security flaw. [
Microsoft Defender Zero-Days Under Active Attack
Huntress is warning that threat actors are exploiting three recently disclosed security flaws in Microsoft Defender to gain elevated privileges in compromised s
Microsoft Gives Enterprise Admins Control Over Copilot Removal
Microsoft says IT administrators can now uninstall the AI-powered Copilot digital assistant from enterprise devices using a new policy setting, which has become
Google Blocks 8.3B Ads, Overhauls Android Privacy
Google this week announced a new set of Play policy updates to strengthen user privacy and protect businesses against fraud, even as it revealed it blocked or r
Critical WordPress Plugin Flaw Exposes Sites to File Upload Attacks
Hackers are actively exploiting a critical vulnerability in the Breeze Cache plugin for WordPress that allows uploading arbitrary files on the server without au
International Police Operation Dismantles 53 DDoS-for-Hire Domains
An international law enforcement operation has taken down 53 domains and arrested four people in connection with commercial distributed denial-of-service (DDoS)
Trigona Ransomware Gang Deploys Custom Tool for Rapid Data Theft
Recently observed Trigona ransomware attacks are using a custom, command-line tool to steal data from compromised environments faster and more efficiently. [...
NIST Restructures CVE Database After Vulnerability Submissions Skyrocket
The National Institute of Standards and Technology (NIST) has announced changes to the way it handles cybersecurity vulnerabilities and exposures (CVEs) listed
Bitwarden CLI Package Compromised in npm Supply Chain Attack
The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload capable of
Apache ActiveMQ Flaw Exploited in Wild, Added to CISA Watch List
A recently disclosed high-severity security flaw in Apache ActiveMQ Classic has come under active exploitation in the wild, per the U.S. Cybersecurity and
Checkmarx KICS Tool Compromised in Supply Chain Attack
Hackers have compromised Docker images, VSCode and Open VSX extensions for the Checkmarx KICS analysis tool to harvest sensitive data from developer environment
New PowMix Botnet Actively Targeting Czech Workers
Cybersecurity researchers have warned of an active malicious campaign that's targeting the workforce in the Czech Republic with a previously undocumented botnet
UK Cyber Officials Alert: Chinese Hackers Using Device Networks
The United Kingdom's National Cyber Security Centre (NCSC-UK) and international partners warned that China-nexus hackers are increasingly using large-scale prox
Cloud Breaches Tied to Orphaned Credentials: 2024 Data
In 2024, compromised service accounts and forgotten API keys were behind 68% of cloud breaches. Not phishing. Not weak passwords. Unmanaged non-human
Password Reset Requests: A Gateway for Attackers
Password resets are one of the easiest ways for attackers to bypass security controls. Specops Software shows how helpdesk social engineering turns a seemingly
Critical Security Threats Surge: Defender Flaw, Excel Exploit
You know that feeling when you open your feed on a Thursday morning and it's just... a lot? Yeah. This week delivered. We've got hackers getting creative in way
State-Backed Hackers Weaponize Outlook, Slack for Covert Attacks
A previously undocumented state-backed threat actor named GopherWhisper is using a Go-based custom toolkit and legitimate services like Microsoft 365 Outlook, S
New RAT Malware Targets Finance Sector via Obsidian
A "novel" social engineering campaign has been observed abusing Obsidian, a cross-platform note-taking application, as an initial access vector to distribute a
Rituals Cosmetics Confirms Customer Data Breach
Dutch cosmetics giant Rituals disclosed a data breach after attackers stole the personal information of an undisclosed number of customers from its "My Rituals"
Banking Sessions Hijacked: Taboola's Hidden Redirect to Temu
A bank approved a Taboola pixel. That pixel quietly redirected logged-in users to a Temu tracking endpoint. This occurred without the bank’s know
Microsoft Edge Update Blocks Teams Meeting Access for Windows
Microsoft confirmed that a recent Microsoft Edge browser update introduced a bug that prevents Windows users from joining Teams meetings. [...]
Cisco Patches Critical Flaws in Identity and Webex Services
Cisco has announced patches to address four critical security flaws impacting Identity Services and Webex Services that could result in arbitrary code execution
CISA Orders Federal Agencies to Patch Critical Microsoft Defender Flaw
CISA has ordered U.S. federal agencies to patch a Microsoft Defender privilege escalation flaw (dubbed BlueHammer) that has been exploited in zero-day attacks.
n8n Automation Platform Weaponized for Phishing Since October
Threat actors have been observed weaponizing n8n, a popular artificial intelligence (AI) workflow automation platform, to facilitate sophisticated phi
Apple Patches iOS Notification Storage Bug Across Devices
Apple has released out-of-band security updates for iPhone and iPad devices to fix a Notification Services flaw that could allow notifications marked for deleti
Critical nginx-ui Flaw Under Active Attack
A recently disclosed critical security flaw impacting nginx-ui, an open-source, web-based Nginx management tool, has come under active exploitation in the
Mirai Botnet Targets Obsolete D-Link Routers
A new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability affecting D-Link DIR-823X routers, to
April Patch Tuesday Addresses Critical Flaws Across Enterprise Software
A number of critical vulnerabilities impacting products from Adobe, Fortinet, Microsoft, and SAP have taken center stage in April's Patch Tuesday rele
Kyber Ransomware Gang Adopts Post-Quantum Encryption
A new Kyber ransomware operation is targeting Windows systems and VMware ESXi endpoints in recent attacks, with one variant implementing Kyber1024 post-quantum
AI Adoption Accelerates: Security Leaders Embrace New Technologies
Few technologies have moved from experimentation to boardroom mandate as quickly as AI. Across industries, leadership teams have embraced its broader poten
Spain Shuts Down Major Manga Piracy Hub, Arrests Four
The Spanish police have dismantled the largest Spanish-language manga piracy platform, operating since 2014, with millions of monthly users from around the glob
Microsoft Patches 169 Vulnerabilities in Major Security Update
Microsoft on Tuesday released updates to address a record 169 security flaws across its product portfolio, including one vulnerability that has b
Self-Spreading npm Attack Targets Developer Credentials
A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages publish
OpenAI Launches GPT-5.4-Cyber for Security Teams
OpenAI on Tuesday unveiled GPT-5.4-Cyber, a variant of its latest flagship model, GPT‑5.4, that's specifically optimized for defensive cybersecurity u