Do Son A new report reveals Russia-linked Shuckworm's evolved cyber campaign targeting a military mission in Ukraine, featuring sophisticated malware and stealthy tactics.
The European Commission launches the "AI Continent Action Plan" to close the AI gap with the US and China, investing in infrastructure and talent to boost EU's AI competitiveness.
WordPress.com introduces an AI Website Builder, enabling users to create websites using natural language prompts. Free users get 30 prompts, while paid users get unlimited.
Anthropic introduces Claude Max, a new subscription tier with increased usage quotas, offering $100 and $200 monthly plans for enhanced AI access and early feature access.
The KB5055523 update in Windows 11 24H2 is causing an unexpected inetpub folder to appear. This is not malware and can be safely deleted.
Google announces Gemini AI support for Anthropic's Model Context Protocol (MCP), aiming to standardize AI model integration with external tools and data, enhancing interoperability.
Google launches Firebase Studio, an AI-powered cloud IDE rivaling Cursor AI, enabling code generation from natural language and images. Users need a Gemini API key.
Microsoft's KB5002700 security update is causing widespread crashes in Office 2016 on Windows 10/11. Users are advised to await a Microsoft rollback or follow complex removal instructions.
SonicWall has patched three vulnerabilities (CVE-2025-23008, CVE-2025-23009, CVE-2025-23010) in its NetExtender VPN client. Update to version 10.3.2 or later to prevent privilege escalation and unauthorized access.
CISA has added Linux kernel vulnerabilities CVE-2024-53197 and CVE-2024-53150 to its KEV catalog, warning of active exploitation. Learn how these flaws are used in Android device exploits and what steps to take.
Research reveals Cisco CVE-2018-0171, a 7-year-old Smart Install RCE vulnerability, remains active, exposing over 1,200 devices. Learn how attackers exploit it and how to protect your network.
A critical vulnerability (CVE-2025-3102) in the SureTriggers WordPress plugin allows unauthenticated admin account creation, potentially exposing over 100,000 sites to full takeover. Update to version 1.0.79 immediately.
Dell has released a security advisory addressing vulnerabilities in PowerScale OneFS, including potential for takeover of privileged accounts and denial of service. Upgrade information and workarounds are provided.
A Silent Push report details the evolving tactics of the Scattered Spider hacker collective, including new phishing kits, the Spectre RAT, and targeting of major brands in 2025.
A security vulnerability (CVE-2025-30215) in NATS Server allows unauthorized actions on JetStream assets due to missing access controls.
A critical SSRF vulnerability (CVE-2025-32013) has been patched in LNbits, the Lightning Network wallet server. Learn how attackers could exploit LNURL authentication to access internal services and how to protect your systems.
The NCSC UK warns of BADBAZAAR and MOONSHINE spyware targeting Uyghur, Tibetan, and Taiwanese individuals. These sophisticated trojans collect sensitive data via fake apps. Learn how to protect your devices.
A high-severity XXE vulnerability (CVE-2025-32406) has been discovered in NAKIVO Backup & Replication, allowing potential unauthorized access to sensitive data. Users are urged to upgrade to the latest version.
A new "Pick Your Poison" phishing campaign tricks users into choosing between having their credentials stolen or infecting their systems with malware. Cofense analysis reveals how this double-edged attack uses files.fm to deliver malicious payloads.
A Trend Micro report explores the evolving tactics of the Russian-speaking cybercriminal underground, including phishing innovations, Web3 scams, the role of ransomware, and the convergence of cyber and physical crime
Invariant Labs reveals a critical vulnerability in the Model Context Protocol (MCP) enabling Tool Poisoning Attacks. Learn how this threat can lead to data exfiltration and AI hijacking
Google introduces Unified Security, powered by Gemini AI, to streamline enterprise cybersecurity. Discover new AI security agents, enhanced threat detection, and data protection tools for comprehensive security management.