Latest News

The state-sponsored hackers deployed custom tools and stayed dormant in the compromised environments for months.

Storm-2561 is distributing fake VPN clients through SEO poisoning, deploying trojans, and stealing login information.

Hundreds of GitHub accounts were accessed using credentials stolen in the VS Code GlassWorm campaign.

Initial evidence indicates Iran may be behind the attack, but officials admitted it could be a false flag. 

Personal information such as names, email addresses, and phone numbers was accessed by hackers.

The vulnerability can be exploited remotely, without authentication, to circumvent existing authentication controls.

Starbucks said the incident involved phishing attacks targeting an employee portal, affecting hundreds.

Other noteworthy stories that might have slipped under the radar: Telus Digital data breach, vulnerabilities in Linux AppArmor allow root privileges, US defense contractor behind Coruna exploits.

Pro-Iranian hackers are targeting sites in the Middle East and starting to stretch into the United States during the war, raising the risk of American defense contractors, power stations and water plants.

The startup relies on AI to turn devices into active agents that understand users’ actions and provide protection in real time.

Google paid over $3.7 million for Chrome vulnerabilities, and more than $3.5 million for cloud security defects.

Evidence indicates that the attackers leveraged existing endpoint management software rather than malware to wipe devices.

The startup is building a control pane to help organizations oversee autonomous AI agents and rapidly adopt them.

Law enforcement agencies in the US and Europe targeted the cybercrime service that has impacted 360,000 devices since 2020.

The flaws can be exploited to manipulate data and bypass security restrictions, potentially leading to code execution.