ThreatFabric, Acronis, and Zimperium detail new activity from the Manic, Grandoreiro, and ToxicPanda 2.0 banking trojans.

Microsoft has released fresh security patches to resolve critical vulnerabilities in Azure, Entra ID, Exchange, and Fabric.

The iAuthFlow V2 phishing kit can register an attacker-controlled passkey, enabling persistent access even after passwords ...

North Korean hackers compromised the popular arrayref package in a supply chain attack targeting the Rust ecosystem.

It may appear as if it is just an assault on our privacy, but it’s wider than that – the collected information is a powerful ...

Hackers are exploiting CVE-2026-64849, a critical SSRF vulnerability in MLflow, to steal credentials and secrets.

Paul M. Nakasone, former director of the NSA and commander of U.S. Cyber Command, launched Nakasone Group, a boutique ...

A joint cybersecurity advisory warns US critical infrastructure organizations about hacker attacks targeting Siemens PLCs.

Cisco has patched 15 vulnerabilities across its products, including eight critical bugs in Crosswork and Secure Workload.

Head Mare hacktivist group exploiting critical TrueConf vulnerabilities CVE-2026-72529 and CVE-2026-72530 to deploy PhantomCore malware.

The Cl0p ransomware group has named more than 40 organizations allegedly targeted in the recent Windchill PLM campaing.

Kiteworks and CyberSheath have released reports on the readiness of defense contractors in light of recent changes to the ...