Latest News

President Donald Trump has yet to name anyone to lead the U.S. Cybersecurity and Infrastructure Security.

TeamViewer has released patches for a high-severity elevation of privilege vulnerability in its client and host applications for Windows.

Several cybercrime websites have been seized in a law enforcement operation, including Nulled, Cracked, Sellix, and StarkRDP.

Maryland healthcare provider Frederick Health has taken some of its systems offline in response to a ransomware attack.

Law firm Berman & Rabin says 152,000 people are impacted by a data breach resulting from a July 2024 ransomware attack.

An unprotected database belonging to Chinese AI company DeepSeek exposed highly sensitive information, including chat history, secret keys, and backend data.

Tenable plans to acquire exposure management company Vulcan Cyber for roughly $150 million in cash and stock. 

GreyNoise reports active exploitation of a newly discovered zero-day vulnerability in Zyxel CPE devices. There are no patches available.

Oligo Security has raised $50 million in Series B funding for its application detection and response (ADR) platform.

New CPU side-channel attacks named SLAP and FLOP can be exploited to remotely steal data from Apple mobile and desktop devices. 

The Mirai-based Aquabot botnet has been targeting a vulnerability in Mitel SIP phones for which a proof-of-concept (PoC) exploit exists.

Engineering firm Smiths Group has disclosed a cyberattack that forced it to take some systems offline and activate business continuity plans.

Rockwell Automation has released six new security advisories to inform customers about several critical and high-severity vulnerabilities.

Artificial intelligence is upending cybersecurity. It is used by adversaries in their attacks, and by defenders in their defense.

Threat actors have been exploiting SimpleHelp remote access software shortly after the disclosure of three vulnerabilities.