All Articles
2469 articles · Updated every 4 hours
Advertisement
Active Zero-Day XSS vulnerability, CVE-2026-42897, impacts Microsoft Exchange OWA, allowing mailbox compromise. No patch available.
A CISA contractor publicly exposed highly privileged AWS GovCloud and internal system credentials on GitHub, detailing CISA's software development. This leak poses a
A new SHub macOS infostealer variant employs fake Apple security update prompts via AppleScript to install a backdoor, threatening user data and system integrity.
Interpol's Operation Ramz dismantled cybercrime infrastructure across MENA, seizing 53 servers used for phishing and malware while arresting 200 suspects.
TeamPCP escalates its supply chain campaign with a confirmed Jenkins plugin compromise and a self-spreading worm targeting the npm and PyPI ecosystems.
The release of Shai-Hulud worm source code triggers a surge in self-replicating clones, targeting software developers and automated CI/CD pipelines.
Leaked Shai-Hulud malware is targeting Node.js developers via malicious npm packages, exfiltrating sensitive data and credentials to Telegram-based C2.
Comprehensive guide for security professionals on identifying, assessing, and governing unsanctioned AI applications to prevent corporate data leakage.
INTERPOL's Operation Ramz results in 201 arrests across 13 MENA countries, disrupting infrastructure used for phishing, BEC, and financial fraud schemes.
Iranian threat actors are targeting insecure automatic tank gauges in fuel infrastructure, posing risks of physical disruption and environmental damage.
Grafana Labs reports a source code breach after attackers leveraged a stolen GitHub Personal Access Token. Analysis of the impact and mitigation steps.
Learn how SOC teams can close the visibility gap in phishing detection and use evidence-based analysis to prevent business disruption after a click.
No articles in this category yet.
We use cookies for analytics (GA4) and personalised ads (AdSense). They are only activated if you accept. Privacy Policy