Cybersecurity researchers have disclosed two security flaws in Wondershare RepairIt that exposed private user data and ...

BRICKSTORM was first documented by the tech giant last year in connection with the zero-day exploitation of Ivanti Connect ...

Weak password let Akira ransomware destroy 158-year-old KNP Logistics, causing £5M ransom demand and 700 job losses.

The vulnerability in question is CVE-2025-51591 (CVSS score: 6.5), which refers to a case of Server-Side Request Forgery ...

"Between June 2024 and July 2025, RedNovember (which overlaps with Storm-2077) targeted perimeter appliances of high-profile ...

Libraesva patches CVE-2025-59689 after confirmed state-sponsored exploitation; update ESG to avoid command injection.

Stripe iframe skimmer hit 49 merchants in Aug 2024, bypassing CSP to steal cards, driving PCI DSS 4.0.1 updates.

Cybersecurity researchers have disclosed details of a new malware family dubbed YiBackdoor that has been found to share "significant" source code overlaps with IcedID and Latrodectus.

The vulnerability, tracked as CVE-2025-26399 (CVSS score: 9.8), has been described as an instance of deserialization of ...

GitHub enforces FIDO 2FA and seven-day token limits after Shai-Hulud npm attack to boost supply chain security.

Eurojust’s €100M crypto fraud bust exposes cross-border laundering since 2018, highlighting rising global investment scam ...

GitGuardian's approach to secrets security recognizes a fundamental truth: detection alone isn't enough. Without effective ...