The Apache Fory project, a high-performance multi-language serialization framework, has disclosed a critical vulnerability (CVE-2025-61622) that could...
cybersecurity
Doxense has issued an urgent security advisory addressing a critical remote code execution (RCE) vulnerability in its...
Broadcom has released patches addressing three vulnerabilities in VMware Aria Operations and VMware Tools, with severities ranging...
The Stormshield Cyber Threat Intelligence (CTI) team has uncovered new phishing infrastructure tied to APT35, also known...
The UK’s National Cyber Security Centre (NCSC) has released a detailed malware analysis report exposing RayInitiator and...
The SUSE Rancher Security Team has issued fixes for three vulnerabilities affecting Rancher Manager, with severities ranging...
Field Effect’s Threat Intelligence team has uncovered a new wave of the TamperedChef malware campaign, leveraging digitally...
Recently, eSentire’s Threat Response Unit (TRU) identified a spear-phishing campaign targeting a manufacturing client that attempted to...
Arctic Wolf has observed a major uptick in Akira ransomware activity since late July 2025, with attackers...
Huntress has published a detailed investigation into a recent intrusion campaign that began as a Python-based infostealer...
Microsoft Threat Intelligence has identified yet another variant of the XCSSET malware, a long-running macOS threat targeting...
Microsoft Threat Intelligence has revealed details of a credential phishing campaign that likely harnessed AI-generated code to...
Researchers at K7 Security Labs have uncovered a new wave of Windows shortcut (.LNK) malware that exploits...
Security researcher Puja Srivastava from Sucuri uncovered two malicious files designed to guarantee persistent attacker access by...
The Python Package Index (PyPI) is once again the target of a phishing campaign aimed at maintainers,...
VDE CERT has issued a security advisory disclosing two vulnerabilities in WAGO Device Sphere and WAGO Solution...
Researchers at Darktrace have identified a sophisticated new campaign that merges traditional malware techniques with modern DevOps...
The U.S. Secret Service announced it has dismantled a sprawling telecommunications threat network across the New York...
Cybersecurity researcher Jeremiah Fowler has discovered a massive unprotected database containing highly sensitive insurance and vehicle-related records....
CISA this week added CVE-2025-10585, a high-severity type-confusion flaw in Google’s V8 JavaScript engine, to its Known...