Amazon detailed a long-running campaign by Russia against critical infrastructure organizations, particularly in the energy sector. Amazon Threat Intelligence published a blog post detailing a mult...
Hackers tied to ShinyHunters extort PornHub after stealing search and viewing history of Premium users in a Mixpanel data breach. PornHub faces extortion after hackers linked to ShinyHunters alleg...
Google has announced that early next year they are discontinuing the dark web report, which was meant to monitor breach data that’s circulating on the dark web.\n\nThe news raised some eyebrows, bu...
Chinese espionage crew Ink Dragon has expanded its snooping activities into European government networks, using compromised servers to create illicit relay nodes for future operations. The campaign...
Japanese e-commerce and logistics company Askul has revealed that a recent data breach stemming from a ransomware attack has resulted in over 700,000 records being compromised. However, prior to t...
The xHunt advanced persistent threat group has firmly established itself as a sophisticated cyber-espionage actor, orchestrating targeted campaigns against organizations in Kuwait. Since its emerge...
Etay Mayor, the chief security strategist at Cato Networks and a professor at Boston College, offers a compelling narrative on the evolving landscape of cybersecurity, emphasizing the importance of...
A new malware-as-a-service (MaaS) known as SantaStealer is making waves in the cybersecurity community, advertised on platforms like Telegram and hacker forums. This information stealer is designed...
Atlassian has recently addressed a series of critical vulnerabilities affecting its suite of products, with a particular focus on a severe flaw in Apache Tika. The vulnerability, identified as CVE-...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2025-43437 Apple - iOS and iPadOS...
The increasing sophistication of vaping devices, now equipped with screens, Bluetooth connectivity, and applications, presents an emerging cybersecurity concern, according to the Cybernews research...
The React team has issued critical fixes addressing two new categories of vulnerabilities within React Server Components (RSC), which could lead to denial-of-service (DoS) or exposure of source cod...
In October 2025, security researchers uncovered NANOREMOTE, a sophisticated new Windows backdoor observed in telemetry. This fully-featured implant shares characteristics with malware detailed in R...
CISA has issued a critical alert regarding an actively exploited zero-day vulnerability impacting the Microsoft Windows Cloud Files Mini Filter Driver. Tracked as CVE-2025-62221, this flaw is a use...
Managed service providers (MSPs) represent increasingly popular cyberattack targets, characterized by numerous endpoints and distributed networks that present adversaries with diverse exploitation ...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2025-14542 undefined - undefined ...
Stanford University has unveiled ARTEMIS, an autonomous AI agent platform designed for penetration testing, which recently underwent rigorous evaluation against human cybersecurity professionals an...
The Hamas-affiliated advanced persistent threat (APT), known as Ashen Lepus (also tracked as WIRTE), has launched a sophisticated espionage campaign targeting governmental and diplomatic entities a...
Google on Wednesday shipped security updates for its Chrome browser to address three security flaws, including one it said has come under active exploitation in the wild. However, a GitHub commit ...
The “Driver Plugin” contains an embedded kernel-mode rootkit that, in some cases, retains valid signatures and remains loadable on fully updated Windows 11 systems, bypassing built-in protection fe...