In a newly uncovered campaign, LAB52 — the intelligence team at S2 Group — has identified a...
cybersecurity
eSentire’s Threat Response Unit (TRU) uncovered a sophisticated attack against a certified public accounting firm in the...
Apache Jena, a widely-used Java framework for building semantic web and linked data applications, has released an...
A recent investigation by cybersecurity firm PRODAFT has uncovered a targeted and cunning phishing campaign by the...
Microsoft had previously announced the launch of a paid Extended Security Updates (ESU) program for Windows 10,...
Sophos has patched three separate high-severity local privilege escalation (LPE) vulnerabilities in its widely used Intercept X...
A critical remote command execution (RCE) vulnerability has been discovered in Livewire, the popular full-stack framework for...
Cyble Research and Intelligence Labs (CRIL) has uncovered an ongoing global phishing campaign that weaponizes QR codes...
In the crowded arena of information-stealing malware, Katz Stealer is quickly establishing itself as one of the...
In April 2025, Microsoft issued a critical security patch addressing a serious vulnerability in the Windows Common...
Matanbuchus, a well-known malware loader sold as Malware-as-a-Service (MaaS), has just leveled up. In its latest evolution—Matanbuchus...
Researchers have disclosed two newly identified vulnerabilities in 7-Zip, one of the world’s most widely used open-source...
On the evening of July 18, 2025, Eye Security identified an active, large-scale exploitation of a newly...
Lenovo has issued a security advisory disclosing three newly discovered vulnerabilities in Lenovo Vantage, a widely pre-installed...
In an age where deception is just a few clicks away, Group-IB’s latest report reveals a rise...
In a newly uncovered software supply chain attack, threat actors have successfully deployed a backdoored version of...
Microsoft has issued an urgent security advisory for on-premises SharePoint Server customers in response to active exploitation...
Imperva researchers have uncovered a supply chain attack masquerading as a popular Python utility. The package in...
A deceptive and highly targeted phishing campaign has successfully compromised several popular npm packages, including eslint-config-prettier, eslint-plugin-prettier,...
A critical SQL injection vulnerability in Fortinet FortiWeb, tracked as CVE-2025-25257, has been added to the CISA...