BRICKSTORM was first documented by the tech giant last year in connection with the zero-day exploitation of Ivanti Connect ...

Cybersecurity researchers have disclosed two security flaws in Wondershare RepairIt that exposed private user data and ...

Weak password let Akira ransomware destroy 158-year-old KNP Logistics, causing £5M ransom demand and 700 job losses.

Stripe iframe skimmer hit 49 merchants in Aug 2024, bypassing CSP to steal cards, driving PCI DSS 4.0.1 updates.

The vulnerability in question is CVE-2025-51591 (CVSS score: 6.5), which refers to a case of Server-Side Request Forgery ...

Libraesva patches CVE-2025-59689 after confirmed state-sponsored exploitation; update ESG to avoid command injection.

Eurojust’s €100M crypto fraud bust exposes cross-border laundering since 2018, highlighting rising global investment scam ...

Cybersecurity researchers have disclosed details of a new malware family dubbed YiBackdoor that has been found to share "significant" source code overlaps with IcedID and Latrodectus.

Firmware security company Binarly, which has been credited with discovering and reporting the two shortcomings, said CVE-2025-7937 is a bypass for CVE-2024-10237, which was disclosed by Supermicro in ...

GitHub enforces FIDO 2FA and seven-day token limits after Shai-Hulud npm attack to boost supply chain security.

Secret Service seizes 300 SIM servers, 100,000 SIM cards near UN assembly, averting imminent national security threat.

The vulnerability, tracked as CVE-2025-26399 (CVSS score: 9.8), has been described as an instance of deserialization of ...