Latest News

The security defect allows unauthenticated attackers to execute arbitrary code remotely via malicious HTTP requests.

CISA updated 59 KEV entries in 2025 to specify that the vulnerabilities have been exploited in ransomware attacks.

Zscaler says the acquisition will allow customers to embed lightweight extensions into any browser, providing increased security and eliminating the need for third-party browsers. 

The hacker claims to have stolen nearly 700,000 Substack user records, including email addresses and phone numbers.

Criminals are using AI to clone professional websites at an industrial scale. A new report shows how one AI-powered network grew to 150+ domains by hiding behind Cloudflare and rotating IP ranges.

VS Code-integrated configuration files are automatically executed in Codespaces when the user opens a repository or pull request.

This latest infusion, led by SYN Ventures, brings the company’s total funding to $16.9 million.

Italy has foiled a series of cyberattacks targeting some of its foreign ministry offices, including one in Washington.

The malware is known for dropping ransomware and other payloads, and for abusing infected machines to proxy traffic.

The vulnerability could allow attackers to execute arbitrary commands and steal credentials and other secrets.

Palo Alto Networks has not attributed the APT activity to any specific country, but evidence points to China.

The security defects can lead to DoS conditions, arbitrary command execution, and privilege escalation.

The Series C funding will enable the company to expand its AI capabilities for disrupting criminal networks.

The flaws dubbed LookOut can be exploited for remote code execution and data exfiltration.

While both cyberwar and cyberwarfare will increase through 2026, cyberwarfare is likely to increase more dramatically. We hope it will never boil over – but we should be aware of the possibility and its consequences.