DieNet, a new hacktivist group, is leveraging DDoS-as-a-service for rapid-fire attacks on critical infrastructure. NETSCOUT reports on their tactics and targets.
Microsoft integrates Google's A2A protocol into Azure AI, enabling seamless communication between AI agents across different cloud platforms.
LinkedIn introduces new AI-powered job search tools for a more intuitive experience. Discover roles that truly fit your skills and aspirations.
Cisco patches CVE-2025-20188, a CVSS 10 flaw in IOS XE WLCs, enabling unauthenticated remote file uploads and root-level command execution.
SonicWall urges urgent updates to SMA 100 Series devices after critical post-auth vulnerabilities expose systems to file deletion and command injection.
Ubiquiti warns of critical RCE flaw in UniFi Protect Cameras (CVE-2025-23123); update firmware and app to prevent potential network compromise.
Google's GTIG reveals LOSTKEYS malware, a new tool by Russian actor COLDRIVER, targeting NATO advisors and Ukraine via fake CAPTCHAs.
Unit 42 uncovers Iranian cyber espionage using a fake modeling agency website to selectively target victims with sophisticated techniques.
Inferno Drainer returns stronger than ever, using Discord phishing and blockchain obfuscation to steal millions in crypto.
Agenda ransomware (Qilin) is back, now using the advanced NETXLOADER and SmokeLoader to enhance infiltration and evade detection. Targets global sectors.
A sophisticated phishing campaign, possibly by APT36, spoofs Indian government sites and uses ClickFix tactics to target Windows and Linux users.
Aikido discovers a Remote Access Trojan (RAT) hidden in rand-user-agent, a popular npm package with 45,000 weekly downloads.
Unit 42 uncovers a sophisticated Lampion malware campaign using ClickFix social engineering tactics to target government and financial sectors in Portugal.
IGEL OS suffers from a critical privilege escalation vulnerability affecting OS 11 and OS 12. Users are urged to patch immediately.
Polish authorities arrested four individuals running a global DDoS-for-hire network, disrupting thousands of cyberattacks. Part of Europol's Operation PowerOFF.
A zero-day privilege escalation vulnerability (CVE-2025-29824) in Microsoft CLFS was exploited by Balloonfly (Play ransomware) before the official patch.
Learn how to scrape the web efficiently at scale using the best proxies in 2025. Avoid IP bans, boost speed, and collect data reliably and securely.
CISA warns that basic cyber attacks are targeting ICS/SCADA systems in the U.S. energy and transportation sectors due to poor cyber hygiene and exposed assets.