Security News & Blog

The Mount Royal University breach highlights how cyberattacks against education institutions can combine data theft with destructive activity.The university confirmed that an unauthorized actor accessed and stole data f…

The SCMBANKER campaign shows how ClickFix social engineering is being used to infect banking users by making them execute the malware themselves.Victims are shown fake CAPTCHA verification pages that instruct them to co…

The new maximum-severity UniFi OS vulnerability highlights the risk of exposing network management platforms to untrusted networks.Ubiquiti’s UniFi OS is used to manage routers, gateways, switches, access points, camera…

The KDDI data breach highlights the serious risk created when email platforms used by telecom and internet service providers are compromised.Attackers exploited a zero-day vulnerability in third-party software used by a…

CISA’s addition of four actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalogue shows how quickly attackers are weaponizing flaws across enterprise applications, CMS platforms, and AI orchest…

The Januscape Linux kernel vulnerability highlights the risk of guest-to-host escape flaws in virtualization platforms.Tracked as CVE-2026-53359, the issue affects Linux KVM on Intel and AMD x86 systems. It exists in th…

The Rogue Agent flaw in Google Dialogflow CX shows how AI chatbot platforms can become risky when custom code runs inside shared, provider-managed environments.The issue affected organizations using Dialogflow CX Playbo…

The discovery of a hidden authentication backdoor in multiple Tenda router firmware versions highlights the serious risk created when undocumented access mechanisms exist inside network devices.The vulnerability, tracke…

The Accenture breach shows how theft of source code and development secrets can create risk far beyond the immediate exposure of internal files.Accenture confirmed an isolated security incident and stated that the sourc…

The Opera GX vulnerability shows how browser customization features can become an unexpected path for data theft when installation controls are not strict enough.Researchers found that a malicious website could silently…

The emergence of QuimaRAT shows how malware-as-a-service is making cross-platform remote-access tools easier for criminals to obtain and operate.QuimaRAT is written in Java, allowing it to target Windows, Linux, and mac…

The disclosure of Januscape, tracked as CVE-2026-53359, highlights the seriousness of vulnerabilities in virtualization layers that are expected to isolate guest systems from the host.The flaw affects Linux KVM on x86 s…