Follow Cyber Kendra on Google News! | WhatsApp | Telegram

Security

WhatsApp Patches Actively Exploited 0day Flaw

WhatsApp has rushed to patch a critical zero-day vulnerability that was actively exploited in targeted cyberattacks against journalists, activists, a…

China's Salt Typhoon Hackers Expose Global Telecom Networks in Massive

A massive international cybersecurity advisory involving 13 countries has exposed the unprecedented scope of Chinese state-sponsored cyber espionage …

WhatsApp AI Features Get Security Overhaul, Critical Flaws Fixed

Meta has addressed critical security vulnerabilities in its upcoming WhatsApp AI features, following an independent audit by cybersecurity firm Trail…

AI-Powered Ransomware 'PromptLock' Marks New Era of Cyber Threats

Cybersecurity researchers at ESET have uncovered the first known AI-powered ransomware, signaling a dangerous evolution in cybercriminal tactics that…

Google Mandates Developer Verification for All Android Apps to Combat Rising Malware Threats

Google is implementing a groundbreaking security measure that will require all Android apps to be registered by verified developers before installati…

Major Data Breach Exposes Thousands of Salesforce Customers Through Compromised Third-Party App

A sophisticated threat actor has successfully infiltrated numerous Salesforce customer instances through compromised OAuth tokens (authentication cre…

Critical Tableau Server Flaws Allow Attackers to Execute Malicious Code on Enterprise Systems

Salesforce has disclosed five critical security vulnerabilities in Tableau Server and Desktop that could allow attackers to execute arbitrary code an…

Critical Android GPU Bug Grants Hackers "God Mode" Access to Device Memory

A critical security flaw in Qualcomm's Adreno GPU drivers has been discovered that allows attackers to gain complete control over Android devices…

Hackers Breach Nation-State APT Group, Dump Entire Arsenal of Government Attack Tools

In what security experts are calling the most significant breach of a nation-state cyber operator since the iSoon leak earlier this year, two mysteri…

NetScaler Zero-Day Exploited for Two Months in Stealth Attacks

A sophisticated cyber threat actor exploited a critical Citrix NetScaler vulnerability for nearly two months before its discovery, successfully breac…

WinRAR Zero-Day Exploited to Deploy Backdoors via Fake Job Applications

A previously unknown vulnerability in WinRAR has been actively exploited by Russian-aligned hackers to infiltrate corporate networks through sophisti…

New HTTP Desync Attacks Compromise Major CDNs and Government Systems

Security researcher James Kettle has published groundbreaking research exposing fundamental vulnerabilities in HTTP/1.1 that led to critical security…

Google Falls Victim to Same Salesforce Attack It Exposed to Public

Google has become the latest high-profile victim in a sophisticated Salesforce data theft campaign orchestrated by the UNC6040 threat group , the sam…

AI-Powered Hackers Trigger 136% Surge in Cloud Attacks, CrowdStrike Warns

A new CrowdStrike threat hunting report has exposed the rise of "enterprising adversaries" who are leveraging artificial intelligence and s…

New HTTP Desync Research Reveals Mass Exploits HTTP/1.1

Security researcher James Kettle is going to present significant findings on HTTP desync vulnerabilities at upcoming cybersecurity conferences, demon…

Microsoft Discovered macOS Flaw That Leaked Apple Intelligence Data Across All Your Devices

A severe macOS vulnerability discovered by Microsoft researchers could have allowed attackers to steal highly sensitive data from Apple Intelligence …

AI Coding Platform Flaw Exposed Private Enterprise Apps

A critical security flaw in the popular AI-powered coding platform Base44 allowed attackers to bypass authentication controls and gain unauthorized a…

Tea App Data Breach Exposes 72,000 Women’s Selfies and IDs

A massive security breach at Tea, the women's dating safety app that recently topped Apple's App Store charts, has exposed approximately 72,0…

SharePoint ToolShell Flaw Under Massive Attack by Chinese Hackers

Microsoft issues emergency patches as three Chinese threat groups exploit zero-day flaws to deploy ransomware and steal sensitive data from thousands…

How to Benchmark Your Organization’s Cyber Security Posture in 2025

In today’s threat landscape, cybersecurity is no longer a tick-box exercise. It should be as integral to your business strategy as reliable internet …