Our security research has uncovered several malicious Chrome extensions that compromise user security. These extensions, with a combined user base exceeding 100,000 users, employ tactics ranging fr...
The 1Password digital vault and password manager has added built-in protection against phishing URLs to help users identify malicious pages and prevent them from sharing account credentials with th...
A recent legal case has revealed a surprising gap in computer privacy that many people likely didn’t know existed. It turns out Microsoft can unlock personal computers for the government, and they ...
In late 2025, Poland’s energy system faced what has been described as the “largest cyberattack” targeting the country in years. ESET Research has now found that the attack was the work of the notor...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2021-47888 The Textpattern Develo...
Nike, the American apparel behemoth, may have suffered a data breach. A prominent cybercriminal gang claims it has hacked the company and is threatening to release stolen data to the public. The Wo...
Under Armour is investigating a data breach after 72M customer records were posted online by a cybercriminal. The stolen data, linked to a November breach claimed by the Everest ransomware gang, in...
Fortinet confirmed attacks are bypassing FortiCloud SSO authentication, affecting even fully patched devices, similar to recent SSO flaws. Threat actors automate firewall changes, add users, enable...
Title: EVMAPA Source: ICS-CERT Advisories Date Published: January 22, 2026 Successful exploitation of these vulnerabilities could lead to degraded service, a denial-of-service, or unauthorized rem...
We discovered an interesting CTF-inspired vulnerability, CVE-2026-22200, in osTicket, a popular open source helpdesk system. This flaw allows anonymous attackers to read arbitrary files from the se...
A new ransomware family called Osiris was used in an attack targeting a major food service franchisee operator in Southeast Asia in November 2025. Investigation by the Symantec and Carbon Black Thr...
Check Point Research (CPR) identified an ongoing phishing campaign that we associate with KONNI, a North Korean–linked threat actor active since at least 2014. KONNI is best known for targeting org...
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed three vulnerabilities in Foxit PDF Editor, one in the Epic Games Store, and twenty-one in MedDream PACS. The vulnerabilit...
Title: Delta Electronics DIAView Source: ICS-CERT Advisories Date Published: January 22, 2026 Excerpt: “Successful exploitation of this vulnerability could enable an attacker to execute arbitrary c...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2025-55130 nodejs - node A ...
A new assessment of cyber risks facing the Milano-Cortina 2026 Winter Games has highlighted phishing and spoofed websites as the most common initial access points for attackers targeting global spo...
A large-scale loan phishing operation in Peru has been uncovered, showing how cybercriminals are abusing fake loan applications to steal valid card numbers and PIN codes from unsuspecting users. Ac...
PcComponentes, a major technology retailer in Spain, has denied claims of a data breach impacting 16 million customers but confirmed it suffered a credential stuffing attack. A threat actor named ‘...
A large-scale campaign is turning a trusted Windows security driver into a weapon that shuts down protection tools before ransomware and remote access malware are dropped. The attacks abuse truesig...
LastPass has warned customers about phishing emails claiming that action is required ahead of scheduled maintenance and told them not to fall for the scam. According to LastPass, the latest phishin...