NetScaler Zero-Day Exploited for Two Months in Stealth Attacks
A sophisticated cyber threat actor exploited a critical Citrix NetScaler vulnerability for nearly two months before its discovery, successfully breac…
Security
WinRAR Zero-Day Exploited to Deploy Backdoors via Fake Job Applications
A previously unknown vulnerability in WinRAR has been actively exploited by Russian-aligned hackers to infiltrate corporate networks through sophisti…
New HTTP Desync Attacks Compromise Major CDNs and Government Systems
Security researcher James Kettle has published groundbreaking research exposing fundamental vulnerabilities in HTTP/1.1 that led to critical security…
Google Falls Victim to Same Salesforce Attack It Exposed to Public
Google has become the latest high-profile victim in a sophisticated Salesforce data theft campaign orchestrated by the UNC6040 threat group , the sam…
AI-Powered Hackers Trigger 136% Surge in Cloud Attacks, CrowdStrike Warns
A new CrowdStrike threat hunting report has exposed the rise of "enterprising adversaries" who are leveraging artificial intelligence and s…
New HTTP Desync Research Reveals Mass Exploits HTTP/1.1
Security researcher James Kettle is going to present significant findings on HTTP desync vulnerabilities at upcoming cybersecurity conferences, demon…
Microsoft Discovered macOS Flaw That Leaked Apple Intelligence Data Across All Your Devices
A severe macOS vulnerability discovered by Microsoft researchers could have allowed attackers to steal highly sensitive data from Apple Intelligence …
AI Coding Platform Flaw Exposed Private Enterprise Apps
A critical security flaw in the popular AI-powered coding platform Base44 allowed attackers to bypass authentication controls and gain unauthorized a…
Tea App Data Breach Exposes 72,000 Women’s Selfies and IDs
A massive security breach at Tea, the women's dating safety app that recently topped Apple's App Store charts, has exposed approximately 72,0…
SharePoint ToolShell Flaw Under Massive Attack by Chinese Hackers
Microsoft issues emergency patches as three Chinese threat groups exploit zero-day flaws to deploy ransomware and steal sensitive data from thousands…
How to Benchmark Your Organization’s Cyber Security Posture in 2025
In today’s threat landscape, cybersecurity is no longer a tick-box exercise. It should be as integral to your business strategy as reliable internet …
Google Unveils New AI Security Arsenal to Prevents Real-World Cyberattack
Google has achieved a cybersecurity milestone by using artificial intelligence to prevent an active exploit attempt in the wild, marking the first ti…
FBI Warns of Deepfake Phishing Campaign Impersonating U.S. Officials
The Federal Bureau of Investigation (FBI) recently warned of a widespread deepfake phishing campaign targeting U.S. federal and state officials and …
Critical Flaw Lets Attackers Hijack Train Brakes With $500 Radio Equipment
A critical security vulnerability in America's railway system allows attackers to remotely hijack train brake controls using inexpensive radio eq…
Critical Browser-Based Attack Chain Compromises Internal Networks Through Single Website Visit
Security researchers have demonstrated a devastating new attack method that allows cybercriminals to execute remote code on internal corporate networ…
Critical Zero-Day Flaw in Fortinet FortiWeb Allows Complete System Takeover
A severe pre-authentication SQL injection vulnerability in Fortinet's FortiWeb Fabric Connector has been discovered, allowing attackers to achiev…
ToolShell - Critical SharePoint Flaw Exposes to Unauthenticated Attacks
Microsoft has released emergency patches for two critical SharePoint vulnerabilities discovered at Pwn2Own Berlin, one of which allows completely una…
'Enter, Exit, Leak': New CPU Side-Channel Attacks Break Isolation in Modern Processors
Security researchers from Microsoft and ETH Zurich have uncovered four new speculative side-channel vulnerabilities in modern AMD and Intel processor…
Your Password Just Became Worthless: Why Hackers Are Winning the Authentication War
New research reveals threat actors are bypassing advanced security systems by targeting the weakest link: human credentials Cybercriminals have drama…
Critical CitrixBleed 2 Zero-Day Enables Memory Theft, Bypasses Authentication
A newly disclosed vulnerability in Citrix NetScaler appliances is allowing attackers to steal sensitive memory contents through a simple HTTP request…