Latest News

Gulshan Management Services has informed authorities about a recent data breach resulting from a ransomware attack.

Fresh attacks targeted three VMware ESXi vulnerabilities that were disclosed in March 2025 as zero-days.

The UK government’s cyber action plan is by the government for the government, and has no advice for the private sector nor CNI.

The deal aims to bolster CrowdStrike's Falcon platform with "continuous identity" protection to secure human and AI-driven access in real-time.

The company will use the funds to enhance its AI-based narrative intelligence technology platform and accelerate go-to-market efforts.

The New York-based data security company has tripled its valuation in just one year. 

When software can think and act on its own, security strategies must shift from static policy enforcement to real-time behavioral governance.

The bug can allow attackers to read arbitrary files from the system, potentially exposing configurations and credentials.

Tracked as CVE-2026-21858 (CVSS score 10), the bug enables remote code execution without authentication.

CISA advisory warns that unauthenticated Bluetooth access in WHILL devices allows for unauthorized movement.

The maximum-severity code injection flaw can be exploited without authentication for remote code execution.

Security advice fails when it comes from those who don’t bear the consequences and won’t be responsible for making it work.

Impersonating a legitimate extension from AITOPIA, the two malicious extensions were also exfiltrating users’ browser activity.

An error in the firmware-upload handler leads to devices starting an unauthenticated root-level Telnet service.

Four vulnerabilities have been fixed in the latest release of Veeam Backup & Replication.