Latest News

Lazarus has used fake job offers in attacks targeting companies developing UAV technology, for information theft.

Other noteworthy stories that might have slipped under the radar: Everest group takes credit for Collins Aerospace hack, Maryland launches VDP, gamers targeted with red teaming tool and RAT.

The customer information published on the dark web includes names, addresses, phone numbers, and email addresses.

In files downloaded from the internet, HTML tags referencing external paths could be used to leak NTLM hashes during file previews.

Questions have been raised over the technical viability of the purported WhatsApp exploit, but the researcher says he wants to keep his identity private.

The relationship between the Russian government and cybercriminal groups has evolved from passive tolerance.

SquareX has shown how malicious browser extensions can impersonate AI sidebar interfaces.

As AI coding tools flood enterprises with functional but flawed software, researchers urge embedding security checks directly into the AI workflow.

Patched in September, the SessionReaper bug could be exploited without authentication to bypass a security feature.

The vulnerabilities allow attackers to predict source ports and query IDs BIND will use, and to inject forged records into the cache.

The bug has been exploited in the wild as a zero-day and the US cybersecurity agency CISA has added it to its KEV catalog.

Verizon’s 2025 Mobile Security Index shows that 85% of organizations believe mobile device attacks are on the rise.

The vulnerability impacts multiple Rust tar parsers, allowing attackers to smuggle additional archive entries.

One of the flaws can be exploited by remote unauthenticated attackers for arbitrary command execution.

The company’s IAM platform identifies AI agents, supports assigning permission to them, and tracks all activity.