Iran-linked MuddyWater used a compromised email to spread Phoenix malware targeting 100+ MENA government entities ...

Cybersecurity researchers have disclosed details of a coordinated spear-phishing campaign dubbed PhantomCaptcha targeting ...

The Continuous Threat Exposure Management (CTEM) framework was introduced to help organizations address this challenge, ...

Malicious NuGet package mimicking Nethereum stole crypto wallet keys using homoglyph tricks and fake downloads.

Neursite utilizes an embedded configuration to connect to the C2 server and uses TCP, SSL, HTTP and HTTPS protocols for ...

KrustyLoader, first detailed by Synacktiv in January 2024, is a Rust-based loader previously put to use by a China-nexus ...

High-severity TARmageddon flaw (CVE-2025-62518) in Rust’s async-tar libraries enables RCE via header parsing bug.

Passphrases aren't a silver bullet. MFA still matters. Compromised credential monitoring still matters. But if you're ...

TP-Link has released security updates to address four security flaws impacting Omada gateway devices, including two critical bugs that could result in arbitrary code execution.

Salt Typhoon, also known as Earth Estries, FamousSparrow, GhostEmperor, and UNC5807, is the name given to an advanced ...

But realizing that potential depends on securing the systems that make it possible. Every organization experimenting with AI ...

CISA adds five exploited vulnerabilities, including Oracle, Microsoft, Kentico, and Apple flaws, requiring fixes by Nov 10, ...