The fake Paysafe, Skrill, and Neteller SDK campaign shows how attackers are abusing public package repositories to target developers working with payment integrations.At least 17 malicious npm and PyPI packages were published to impersonate legitimate payment SDKs. The pac…
The Mount Royal University breach highlights how cyberattacks against education institutions can combine data theft with destructive activity.The university confirmed th…
The SCMBANKER campaign shows how ClickFix social engineering is being used to infect banking users by making them execute the malware themselves.Victims are shown fake C…
The new maximum-severity UniFi OS vulnerability highlights the risk of exposing network management platforms to untrusted networks.Ubiquiti’s UniFi OS is used to manage …
The KDDI data breach highlights the serious risk created when email platforms used by telecom and internet service providers are compromise…
CISA’s addition of four actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalogue shows how quickly attackers are…
The Januscape Linux kernel vulnerability highlights the risk of guest-to-host escape flaws in virtualization platforms.Tracked as CVE-2026-…
The Rogue Agent flaw in Google Dialogflow CX shows how AI chatbot platforms can become risky when custom code runs inside shared, provider-…
The discovery of a hidden authentication backdoor in multiple Tenda router firmware versions highlights the serious risk created when undoc…
The Accenture breach shows how theft of source code and development secrets can create risk far beyond the immediate exposure of internal f…
The Opera GX vulnerability shows how browser customization features can become an unexpected path for data theft when installation controls…
The emergence of QuimaRAT shows how malware-as-a-service is making cross-platform remote-access tools easier for criminals to obtain and op…
The disclosure of Januscape, tracked as CVE-2026-53359, highlights the seriousness of vulnerabilities in virtualization layers that are exp…
The fake IT-support campaign abusing Microsoft Teams shows how attackers are shifting from email phishing to direct social engineering thro…
The Medtronic data breach highlights the serious and long-lasting consequences of exposing personal and health-related information.The inci…