News

Threat actors downgrade FIDO2 MFA auth in PoisonSeed phishing attack
A PoisonSeed phishing campaign is bypassing FIDO2 security key protections by abusing the cross-device sign-in feature in ...
Nextgov1d
Threat intel firms on alert for government systems impacted by Microsoft SharePoint vulnerability
Governments, schools, healthcare providers and large enterprise firms are at risk, one cyber threat intelligence chief said.
SDxCentral14h
Palo Alto warns patches 'insufficient' for Microsoft SharePoint threat
Michael Sikorski, CTO and head of threat Intelligence for Unit 42 at Palo Alto Networks, told SDxCentral that “on-prem SharePoint deployments – particularly within government, schools, and healthcare, ...
North Korean XORIndex malware hidden in 67 malicious npm packages
North Korean threat actors planted 67 malicious packages in the Node Package Manager (npm) online repository to deliver a new ...
The Quantum Threat To Encryption: How Businesses Can Future-Proof
When quantum computers become powerful enough to break current encryption protocols, long-term data security and ...
CSO Online6d
Salt Typhoon hacked the US National Guard for 9 months, and accessed networks in every state
Chinese hackers stole network diagrams, credentials, and personnel data in a breach that poses a threat to critical ...
SecurityWeek7d
DDoS Attacks Blocked by Cloudflare in 2025 Already Surpass 2024 Total
Cloudflare has published its quarterly DDoS threat report for Q2 2025 and the company says it has blocked millions of attacks ...
A year after cyber attack, Columbus could invest $23M in cybersecurity upgrades
Almost a year after foreign hackers infiltrated Columbus' computer systems and leaked stolen data, the city could invest $23 ...
CSO Online3d
Threat actors scanning for apps incorporating vulnerable Spring Boot tool
GreyNoise said over 2,000 IP addresses have scanned for Spring Boot Actuator endpoints in the past 90 days. Of them, 1,582 ...