Do Son Microsoft, Google, and major cybersecurity firms are collaborating to unify hacker group naming, aiming for clearer threat intelligence across the industry.
A U.S. jury ordered NSO Group to pay Meta's WhatsApp $167M in damages for its 2019 Pegasus spyware attack on 1,400+ users.
OpenAI's Sora video generation is now free on Bing Mobile! Create up to 10 videos, with limitations. Microsoft aims to boost Bing engagement.
BitoPro confirms $11.5M hot wallet cyberattack after investigator @zachxbt exposed the theft. User funds are safe, but initial silence raises concerns.
Microsoft's new WHCP mandates all Windows PC USB-C ports support display output, power delivery, and 5Gbps data transfer, aiming for consistent user experience.
The EU's new regulation mandates 5 years of functional and security updates for Android phones, aiming to reduce e-waste and extend device lifespans.
Microsoft will cease intrusive Edge practices in the EU due to the Digital Markets Act, allowing uninstallation and more default browser control.
Speculation abounds for the Google Pixel 10 series launch. Will it be an early June reveal for Pixel Superfans, or the anticipated August 13 event?
BitMEX security team infiltrates Lazarus Group's infrastructure after a phishing attempt, exposing their tactics and even a hacker's real location.
ASUS recommends upgrading to Windows 11 and AI-powered PCs as Windows 10 support ends. Get ready for a new era of productivity and security.
A critical CVSS 10.0 vulnerability (CVE-2025-5086) in DELMIA Apriso threatens global manufacturing. Urgent action needed to protect production.
High-severity flaws (CVE-2025-20298 & CVE-2025-20297) impact Splunk Enterprise & Universal Forwarder. Learn how to protect your data.
HPE StoreOnce Software has critical vulnerabilities, including a 9.8 CVSS authentication bypass and RCE flaws. Update now to version 4.3.11 or later.
A security researcher achieved full control of the FiberGateway GR241AG router, exposing 1.6M Portuguese households to RCE, DNS hijacking, and WPA2 key theft.
Wiz uncovers JINX-0132, a cryptojacking campaign exploiting misconfigured Nomad, Consul, Docker, and Gitea in DevOps environments to mine Monero.
Qualys reveals two critical Linux vulnerabilities (CVE-2025-5054, CVE-2025-4598) in Apport & systemd-coredump, risking sensitive data exposure. Patch now!
Haozi, a Chinese Phishing-as-a-Service platform, is back, offering no-code phishing kits and full support. Learn how this service enables easy cybercrime.
A new npm supply chain attack, "xlsx-to-json-lh," uses typosquatting to enable remote code execution, silently awaiting a "kill switch" to delete project directories.
Netskope reveals a surge in phishing on Glitch, abusing the platform to bypass MFA and steal credentials, mainly targeting Navy Federal Credit Union members.
Learn how interactive sandboxes like ANY.RUN can detect and analyze Microsoft 365 phishing attacks in real-time, preventing silent breaches and data exfiltration.
A sophisticated malware campaign targets Korean Internet cafés with Gh0st RAT and CoinMiner, hijacking systems for crypto mining. ASEC urges immediate action.
Kaspersky's Q1 2025 report highlights a surge in attacks on aging systems, unpatched flaws, and mismanaged updates, urging vigilance and prompt action.