The North Korean threat actor known as the Lazarus Group has been linked to a previously undocumented JavaScript implant ...

The tech giant said the attack involves sending phishing emails that masquerade as Microsoft Teams meeting invitations that, ...

AI-driven social engineering is transforming cybercrime, leveraging deepfake videos, voice cloning, and OSINT automation to ...

RansomHub, 2024’s most active ransomware group, breached 600+ organizations via Active Directory flaws and brute-force VPN ...

PostgreSQL SQL injection flaw (CVE-2025-1094) exploited alongside BeyondTrust zero-day, enabling arbitrary code execution.

Cybersecurity researchers have disclosed a new type of name confusion attack called whoAMI that allows anyone who publishes an Amazon Machine Image ( AMI) with a specific name to gain code execution ...

Hackers exploit Webflow CDN to host fake PDFs with CAPTCHA phishing, tricking users into entering credit card details while ...

RA World ransomware used PlugX malware in Nov 2024, hinting at a lone hacker monetizing Chinese espionage tools.

Palo Alto Networks patches CVE-2025-0108, a PAN-OS flaw (CVSS 7.8) allowing authentication bypass. Update now.

The attack campaign, dubbed DEEP#DRIVE by Securonix, has been attributed to a hacking group known as Kimsuky, which is also ...

Secure GenAI apps from evolving identity threats, tackling authentication, authorization, and AI security risks.

REF7707 deployed FINALDRAFT malware, using Microsoft Graph API for stealthy command-and-control in a global espionage ...