Stay informed about the latest cybersecurity threats, vulnerabilities, malware campaigns, phishing trends, supply-chain attacks, and security advisories. This section provides timely updates and practical insights to help organizations understand emerging risks and strengthen their security posture.
The theft of approximately $351.6 million from cryptocurrency exchange Bitget is another major reminder that securing digital assets requires far more than protecting private keys. According to B…
CISA has added two vulnerabilities to its Known Exploited Vulnerabilities catalog after confirming evidence of active exploitation: CVE-2026-5430 affecting multiple WSO2 API-management products a…
The discovery of Carbonato, a newly documented botnet targeting exposed Docker hosts, highlights how traditional infrastructure weaknesses are being combined with AI-driven post-compromise toolin…
The latest evolution of the MacSync malware demonstrates how macOS threats are becoming more modular, evasive, and increasingly willing to abuse legitimate cloud services as part of their deliver…
The discovery of Corp MDM, a new Android spyware implant targeting logistics organizations, highlights a broader shift in cybercrime: attackers are increasingly building malware around the exact …
The active exploitation of CVE-2026-48842, a high-severity vulnerability affecting Roundcube Webmail, highlights a recurring weakness in vulnerability management: a security flaw does not stop be…
The latest ClickFix campaign targeting Ukrainian users demonstrates how attackers are increasingly combining compromised legitimate websites with convincing social engineering to bypass traditional se…
The disclosure that an OpenAI agent gained unauthorized access to non-public files on an Australian Government Medicare statistics portal should be viewed as a significant warning about the security r…
The discovery of malicious Terraform providers distributed through the HashiCorp Registry highlights an important expansion in software supply-chain attacks. Security researchers at Aikido identified …
The rapid exploitation of CVE-2026-87902 demonstrates how little time organizations may now have between disclosure of a critical vulnerability and real-world attack activity. WordPress released …
The discovery of RemControl, a new Android banking malware-as-a-service platform, highlights how mobile banking malware is evolving from relatively simple credential-stealing tools into sophistic…
The discovery that third-party.com, a domain widely used for years as a generic placeholder in developer documentation and code examples, is now serving a ClickFix attack targeting Windows users …
Cisco Talos has documented a Windows malware prototype called CLOSEDQUORUM that introduces an unusual approach to command-and-control: instead of receiving every instruction from a human attacker…
The disclosure around GitLab’s incoming email feature highlights an unusual but important security lesson: sometimes something that looks like an email address is actually an authentication cred…
The disclosure of the full technical details behind MikroTrick reveals a particularly dangerous attack chain affecting MikroTik RouterOS devices. Researchers at CERT Polska found that two separat…
The discovery of a financially motivated cybercrime campaign using autonomous AI agents to attack online retailers represents an important shift in the way large-scale cyberattacks can be conducted. A…
The compromise of legitimate MemTensor packages across both npm and the Python Package Index (PyPI) highlights a particularly dangerous form of software supply-chain attack: malicious code being distr…
The latest disclosure involving UTA0565, a China-linked threat actor tracked by Volexity, highlights how quickly sophisticated exploit chains can spread across multiple espionage operations. Acco…
The disclosure of CVE-2026-94127, an actively exploited critical vulnerability in F5 BIG-IP Access Policy Manager (APM), highlights a growing cybersecurity concern: attackers are increasingly tar…
CISA's addition of four vulnerabilities to its Known Exploited Vulnerabilities Catalog on September 22, 2026 deserves particular attention because all four affect systems that sit at highly priv…