Cyber Kendra

A critical security vulnerability in Fortinet's FortiWeb web application firewall is being actively exploited in the wild, allowing attackers to …

Anthropic has disclosed what security researchers are calling a watershed moment in cybersecurity: the first documented case of a largely autonomous …

One of China's largest cybersecurity firms has been compromised in what security experts are calling one of the most consequential state-backed h…

Three of the world's most prolific cybercrime collectives—Scattered Spider, LAPSUS, and Shiny Hunters—have merged into a unified threat alliance …

Apple has patched six critical WebKit vulnerabilities in iOS 26.1 and iPadOS 26.1, with all six flaws discovered by Google's AI-powered Big Sleep…

Cybersecurity researchers have uncovered a sophisticated backdoor that exploits OpenAI's legitimate services as a covert command-and-control chan…

Mobile scammers stole over $400 billion from victims worldwide in the past year, but new data shows Android users are experiencing far fewer attacks …

Widespread conversation over a supposed Gmail security breach affecting 183 million users has been dismissed by Google as a fundamental misunderstand…

A critical security vulnerability in Google Cloud Platform's Vertex AI service allowed users' AI-generated responses to be accidentally route…

Cybersecurity researchers have confirmed active exploitation of a critical Windows Server Update Services (WSUS) vulnerability just hours after Micro…

Google's Project Zero has disclosed a severe vulnerability in Dolby's DDPlus Unified Decoder that becomes a zero-click exploit on Android dev…

F5 Networks has disclosed a significant security breach where a sophisticated nation-state threat actor maintained persistent access to its systems f…

Microsoft has released critical October 2025 Patch Tuesday updates KB5066835, KB5066793, and KB5066791, addressing 172 vulnerabilities including six …

A sophisticated new attack vector targeting Android devices can covertly steal two-factor authentication codes, private messages, and location data—a…

Cybersecurity researchers have uncovered a sophisticated phishing campaign that exploits browser caching mechanisms to smuggle malware onto victims&#…

A newly disclosed vulnerability in Progress Telerik UI for ASP.NET AJAX could enable attackers to crash or potentially execute malicious code on mill…

SonicWall has dramatically expanded the scope of last month's security breach, confirming that all customers using its cloud backup service had t…

Security researchers have uncovered a sophisticated attack campaign where China-nexus threat actors exploited Nezha—a legitimate open-source server m…

Microsoft Threat Intelligence has uncovered a sophisticated cybercrime operation targeting U.S. universities, where hackers are compromising employee…

A critical remote code execution vulnerability lurking in Redis for over a decade has been discovered by cybersecurity researchers, potentially expos…