Mirai Botnet Targets Obsolete D-Link Routers
A new Mirai-based malware campaign is actively exploiting CVE-2025-29635, a high-severity command-injection vulnerability affecting D-Link DIR-823X routers, to
Cybersecurity
531 articles
April Patch Tuesday Addresses Critical Flaws Across Enterprise Software
A number of critical vulnerabilities impacting products from Adobe, Fortinet, Microsoft, and SAP have taken center stage in April's Patch Tuesday rele
Kyber Ransomware Gang Adopts Post-Quantum Encryption
A new Kyber ransomware operation is targeting Windows systems and VMware ESXi endpoints in recent attacks, with one variant implementing Kyber1024 post-quantum
AI Adoption Accelerates: Security Leaders Embrace New Technologies
Few technologies have moved from experimentation to boardroom mandate as quickly as AI. Across industries, leadership teams have embraced its broader poten
Spain Shuts Down Major Manga Piracy Hub, Arrests Four
The Spanish police have dismantled the largest Spanish-language manga piracy platform, operating since 2014, with millions of monthly users from around the glob
Microsoft Patches 169 Vulnerabilities in Major Security Update
Microsoft on Tuesday released updates to address a record 169 security flaws across its product portfolio, including one vulnerability that has b
Self-Spreading npm Attack Targets Developer Credentials
A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages publish
OpenAI Launches GPT-5.4-Cyber for Security Teams
OpenAI on Tuesday unveiled GPT-5.4-Cyber, a variant of its latest flagship model, GPT‑5.4, that's specifically optimized for defensive cybersecurity u
Fraud Networks Now Run Like Call Centers With Training
Fraud operations now operate like call centers, complete with hiring, training, and performance tracking. Flare reveals how cybercriminals manage "Caller-as-a-S
Critical Composer Flaws Allow Arbitrary Code Execution
Two high-severity security vulnerabilities have been disclosed in Composer, a package manager for PHP, that, if successfully exploited, could res
Microsoft Teams Efficiency Mode Targets Resource-Strapped PCs
Microsoft is preparing to roll out a new Efficiency Mode for Microsoft Teams for systems with limited CPU and memory resources to improve app responsiveness. [.
Google Fortifies Pixel 10 with Rust-Based DNS Security Layer
Google has announced the integration of a Rust-based Domain Name System (DNS) parser into the modem firmware as part of its ongoing efforts to beef up the secur
GoGra Linux Malware Exploits Microsoft Graph API for Covert Attacks
A Linux variant of the GoGra backdoor uses legitimate Microsoft infrastructure, relying on an Outlook inbox for stealthy payload delivery. [...]
AI-Generated Scam Campaign Floods Google Discover Feed
Cybersecurity researchers have unmasked a novel ad fraud scheme that has been found to leverage search engine poisoning (SEO) techniques and artificial intellig
Microsoft Graph API Change Breaks Universal Print Sharing
Microsoft says that an ongoing Universal Print sharing issue that prevents users from creating some printer shares is due to a Microsoft Graph API code change.
Mirax Android RAT Hijacks 220K Devices via Meta Ads
A nascent Android remote access trojan called Mirax has been observed actively targeting Spanish-speaking countries, with campaigns reaching more than 220,
1,300+ Microsoft SharePoint Servers at Risk From Spoofing Flaw
Over 1,300 Microsoft SharePoint servers exposed online remain unpatched against a spoofing vulnerability that was exploited as a zero-day and is still being abu
Critical Security Risks Jump 400% as AI Dev Tools Outpace Detection
OX Security recently analyzed 216 million security findings across 250 organizations over a 90-day period. The primary takeaway: while raw alert volume gre
Microsoft Issues Emergency Patches for Critical ASP.NET Core Flaw
Microsoft has released out-of-band (OOB) security updates to patch a critical ASP.NET Core privilege escalation vulnerability. [...]
108 Malicious Chrome Extensions Target 20K Users
Cybersecurity researchers have discovered a new campaign in which a cluster of 108 Google Chrome extensions has been found to communicate with the same command-
French Government Agency Confirms Data Breach
France Titres, the government agency in France for issuing and managince administrative documents has disclosed a data breach after a threat actor claimed the a
Critical ShowDoc Flaw Under Active Attack
A critical security vulnerability impacting ShowDoc, a document management and collaboration service popular in China, has come under active exploitation i
New Lotus Malware Targets Venezuelan Energy Sector
A previously undocumented data-wiping malware dubbed Lotus was used last year in targeted attacks against energy and utilities organizations in Venezuela. [...]
CISA Flags 6 Critical Vulnerabilities Under Active Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added half a dozen security flaws to its Known Exploited Vulnerabilities (KEV) catalo
UK Regulator Launches Probe Into Telegram Over CSAM Concerns
Ofcom, the United Kingdom's independent communications regulator, has launched an investigation into Telegram based on evidence suggesting it's being used to sh
JanelaRAT Malware Launches 14,739 Attacks on Brazilian Banks
Banks and financial institutions in Latin American countries like Brazil and Mexico have continued to be the target of a malware family called JanelaRAT. A modi
Seamless Fraud Defense: Protecting Users Without Slowing Them Down
Fraud prevention and user experience don't have to be a tradeoff. IPQS shows how combining identity, device, and network signals stops fraud without adding fric
Critical PDF Zero-Day and State Infrastructure Threats Emerge
Monday is back, and the weekend’s backlog of chaos is officially hitting the fan. We are tracking a critical zero-day that has been quietly living in
CISA Issues Urgent Warning on SD-WAN Flaw Under Active Attack
CISA has given U.S. government agencies four days to secure their systems against another Catalyst SD-WAN Manager vulnerability it flagged as actively exploite
FBI and Indonesian Police Shut Down $20M W3LL Phishing Scheme
The U.S. Federal Bureau of Investigation (FBI), in partnership with the Indonesian National Police, has dismantled the infrastructure associated with a global p
Ransomware Negotiator Admits to Leading BlackCat Attacks
41-year-old Angelo Martino, a former employee of cybersecurity incident response company DigitalMint, has pleaded guilty to targeting U.S. companies in BlackCat
AI Model Finds Zero-Days Across All Major Operating Systems
Anthropic restricted its Mythos Preview model last week after it autonomously found and exploited zero-day vulnerabilities in every major operating system and b
6,400 Apache ActiveMQ Servers Under Active Attack
Nonprofit security organization Shadowserver found that over 6,400 Apache ActiveMQ servers exposed online are vulnerable to ongoing attacks exploiting a high-se
Congressional Pressure Mounts as CISA Grapples with Major Data Leak
Lawmakers in both houses of Congress are demanding answers from the U.S. Cybersecurity & Infrastructure Security Agency (CISA) after KrebsOnSecurity report
OpenAI Revokes macOS Certificate Following Axios Supply Chain Issue
OpenAI revealed a GitHub Actions workflow used to sign its macOS apps led to the download of the malicious Axios library on March 31, but noted that no user dat
NGate Android Malware Targets NFC Payments via HandyPay
A new variant of the NGate malware that steals NFC payment data is targeting Android users by hiding in a trojanized version of HandyPay, a legitimate mobile pa
North Korean Hackers Target Users Via Facebook Befriending Scam
The North Korean hacking group tracked as APT37 (aka ScarCruft) has been attributed to a fresh multi-stage, social engineering campaign in which threat act
North Korean Hackers Blamed for $290M KelpDAO Crypto Heist
State-sponsored North Korean hackers are likely behind the $290 million crypto-heist that impacted the KelpDAO DeFi project on Saturday. [...]
CPUID Site Compromised to Distribute STX RAT Malware
Unknown threat actors compromised CPUID ("cpuid[.]com"), a website that hosts popular hardware monitoring tools like CPU-Z, HWMonitor, HWMonitor Pro, and P
Apple's Chinese App Store Hit by Crypto-Stealing Wallet Scams
A set of 26 malicious apps on Apple App Store impersonate popular wallets, such as Metamask, Coinbase, Trust Wallet, and OneKey, to steal recovery or seed phras
Botmaster Behind Kimwolf IoT Botnet Arrested
Canadian authorities on Wednesday arrested a 23-year-old Ottawa man on suspicion of building and operating Kimwolf, a fast spreading Internet-of-Things botnet t
Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621
Adobe has released emergency updates to fix a critical security flaw in Acrobat Reader that has come under active exploitation in the wild. The vulner
Gentlemen Ransomware Gang Deploys SystemBC Botnet in Corporate Attacks
A SystemBC proxy malware botnet of more than 1,570 hosts, believed to be corporate victims, has been discovered following an investigation into a Gentlemen rans
Third-Party Vendors: Your Organization's Hidden Security Risk
The next major breach hitting your clients probably won't come from inside their walls. It'll come through a vendor they trust, a SaaS tool their
Seiko USA Website Defaced in Data Theft Attack
The Seiko USA website was defaced over the weekend, displaying a message from attackers claiming they stole its Shopify customer database and threatening to lea
WhatsApp Warns 200 Users of Fake iOS App Spyware
Meta-owned messaging platform WhatsApp said it alerted about 200 users who were tricked into installing a bogus version of its iOS app that was infected with&nb
Microsoft Teams Targeted in Enterprise Helpdesk Impersonation Attacks
Microsoft is warning of threat actors increasingly abusing external Microsoft Teams collaboration and relying on legitimate tools for access and lateral movemen
Critical Vulnerabilities Expose Popular Software to Active Attacks
This week had real hits. The key software got tampered with. Active bugs showed up in the tools people use every day. Some attacks didn’t ev
Backups Alone Won't Save Your Business From Downtime
Backups protect data, but don't keep your business running during downtime. Datto shows why BCDR is essential to keep operations running during ransomware and o
Identity Gaps Pose Growing Enterprise Risk as AI Threats Escalate
In the rapid evolution of the 2026 threat landscape, a frustrating paradox has emerged for CISOs and security leaders: Identity programs are matu