Latest News

Researchers uncover new software supply chain threat from LLM-generated package hallucinations.

Threat actors are publishing malicious NPM packages to steal PayPal credentials and hijack cryptocurrency transfers.

The CVE-2025-22457 has already been exploited by a China-nexus hacking gang notorious for breaking into edge network devices.

The hackers who posted the documents on Telegram said the attack was in response to alleged Moroccan “harassment” of Algeria on social media platforms.

A vulnerability in the OttoKit WordPress plugin with over 100,000 active installations has been exploited in the wild.

Noteworthy stories that might have slipped under the radar: Scattered Spider still active despite arrests, hacker known as EncryptHub unmasked, Rydox admins extradited to US. 

SonicWall has released fixes for three vulnerabilities in NetExtender for Windows, including a high-severity bug.

Laboratory Services Cooperative says the personal and medical information of 1.6 million was stolen in an October 2024 data breach.

In a secret meeting between Chinese and US officials, the former confirmed conducting cyberattacks on US infrastructure.

Very few people in the cybersecurity industry do not know, or know of, Bryson Bort, CEO/Founder of SCYTHE and the co-founder of ICS Village.

Law enforcement agencies in multiple countries have announced the arrests of users of the malicious Smokeloader botnet.

Trump orders a termination of any active security clearances held by Krebs and a suspension of clearances held by individuals at SentinelOne.

Juniper Networks has patched two dozen vulnerabilities in Junos OS and Junos OS Evolved, and dozens of flaws in Junos Space third-party dependencies.

Routers are the riskiest devices in enterprise networks as they contain the most critical vulnerabilities, a new Forescout report shows.

GitHub security campaigns make it easier for developers and security teams to collaborate on fixing vulnerabilities in their applications.