Do Son Stay ahead in 2025 with top API security best practices for security teams—covering auth, rate limiting, encryption, and threat detection.
A massive, long-running proxy botnet using outdated IoT devices for criminal anonymity has been dismantled in a global law enforcement operation.
Sophisticated malware hides inside image files within .NET apps to secretly infect systems, targeting finance in Türkiye and logistics in Asia.
A cyber-espionage campaign linked to Türkiye is exploiting a zero-day flaw in Output Messenger to target entities in Iraq. Learn about the attack.
Broadcom releases a VMware Tools update to fix a Moderate severity file handling vulnerability (CVE-2025-22247) affecting Windows and Linux.
Facing the dreaded Blue Screen on Windows 11? Microsoft's new guide offers basic tips, but fixing it yourself can still be tough.
Microsoft Teams is adding a "Prevent Screen Capture" feature that will turn the meeting screen black if someone tries to take a capture. Rolling out July 2025.
Good news for Windows 10 users! Microsoft reverses course, extending Microsoft 365 support with security updates until October 2028.
CVE-2024-26809 affects Linux nftables with a double-free bug in nft_pipapo_destroy, enabling kernel-level exploitation and potential root access.
CVE-2025-3462 and CVE-2025-3463 in ASUS DriverHub expose motherboards to remote system manipulation via crafted HTTP requests—update now.
Defendnot disables Windows Defender using a novel method, directly interacting with the WSC. Learn how this new security tool works.
A security flaw in code-server can expose your VS Code sessions. Learn how attackers can steal credentials and what to do.
OtterCookie malware by North Korea-linked WaterPlum group evolves to target Chrome, MetaMask, and system files on both Windows and macOS platforms.
Warning! Malicious npm packages pumptoolforvolumeandcomment & debugdogs steal crypto keys and trading data, sending it via Telegram. Stay safe!
Massive FreeDrain crypto phishing campaign uses Google SEO and free hosting to steal wallets. Trezor, Ledger users beware!
Critical stack overflow in libexpat (CVE-2024-8176) allows DoS and potential memory corruption via malicious XML. Update to 2.7.0 now!
New email campaign uses tricky tactics and legitimate services to deliver the RATty Trojan in Spain, Italy, and Portugal. Stay alert for invoice scams!
Watch out! Sophisticated Facebook ads lure crypto users to download malware via fake platforms and celebrity endorsements. Bitdefender warns of data theft.
Cisco Talos warns of a Brazil-focused spam campaign abusing legitimate remote access tools (N-able, PDQ) to gain full system control. Stay vigilant!
Urgent warning! Malicious npm packages disguised as Cursor AI tools are stealing credentials and installing backdoors on macOS. Protect your code!
Two flaws in Mitel SIP phones—CVE-2025-47188 and CVE-2025-47187—enable remote command execution and file uploads, putting enterprise networks at risk.
CVE-2025-31324 in SAP NetWeaver lets attackers upload web shells, enabling full remote code execution and system compromise—no login required.