malicious

April 3, 2026

14,000+ F5 BIG-IP APM Instances Exposed Online as Attackers Exploit RCE Vulnerability

Cybersecurity researchers have identified a massive attack surface involving F5 BIG-IP Access Policy Manager (APM) devices. Following a critical severity…
Read More »
April 3, 2026

CISA Includes TrueConf Security Flaw in KEV Catalog After Exploitation in the Wild

The Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical security flaw affecting the TrueConf Client to its…
Read More »
April 3, 2026

Microsoft Forces Unmanaged Windows 11 Devices to Upgrade to Version 24H2

Microsoft has officially launched an automated, machine-learning-driven rollout for Windows 11, version 25H2, targeting unmanaged systems. As part of its…
Read More »
April 3, 2026

New Progress ShareFile Flaws Expose Servers to Unauthorized Remote Takeover

Security researchers at watchTowr Labs have disclosed a critical exploit chain in the Progress ShareFile Storage Zone Controller. The vulnerabilities,…
Read More »
April 3, 2026

Malicious Chrome Extension “ChatGPT Ad Blocker” Targets Users, Steals Conversations

Security researchers have exposed a malicious Google Chrome extension dubbed “ChatGPT Ad Blocker,” which stealthily pilfers private AI dialogues. The…
Read More »
April 3, 2026

OpenSSH 10.3 Released With Patch for Shell Injection and Other Security Bugs

The OpenSSH project has released version 10.3 alongside its portable version 10.3p1. This major update followed a brief testing phase…
Read More »
April 2, 2026

NoVoice on Google Play Exploits 22 Flaws to Hit Millions of Android Users

A sophisticated Android rootkit campaign named Operation NoVoice infiltrated over 50 applications on Google Play, exploiting 22 known vulnerabilities to…
Read More »
April 2, 2026

Axios npm Supply Chain Breach: Microsoft Shares Mitigation Steps

Microsoft hasdetailed how organizations can detect and mitigate a recent supply chain compromise involving malicious Axios npm releases and infrastructure…
Read More »
April 2, 2026

FBI Warns Chinese Mobile Apps Could Expose User Data to Cyberattacks

The Federal Bureau of Investigation (FBI) has issued a public warning about potential data security risks associated with foreign-developed mobile…
Read More »
April 2, 2026

Cisco Smart Software Manager Flaw Allowed Arbitrary Command Execution

Cisco has issued a critical security alert regarding a severe vulnerability in its Smart Software Manager On-Prem (SSM On-Perm) platform.…
Read More »
April 2, 2026

WhatsApp Attack Chain Delivers VBS, Cloud Payloads, MSI Backdoor

A newmalware campaign leverages WhatsApp messages to deliver malicious Visual Basic Script (VBS) files to Windows systems, facilitating persistent remote…
Read More »
April 1, 2026

CrystalX Malware-as-a-Service Spreads via Telegram With Stealer, RAT Tools

Hackers are actively promoting a new malware-as-a-service (MaaS) platform called CrystalX RAT through private Telegram channels, offering cybercriminals a powerful…
Read More »
April 1, 2026

Top 10 Best Dynamic Application Security Testing (DAST) Platforms in 2026

In today’s fast-paced software development world, where applications are released at an unprecedented rate, ensuring their security is more critical…
Read More »
April 1, 2026

Cisco Faces Alleged Data Leak as ShinyHunters Claims Responsibility

Cisco is actively dealing with a major cybersecurity incident after threat actors breached its internal development networks. The notorious hacking…
Read More »
April 1, 2026

Google Warns of New Chrome Zero-Day Under Active Exploitation — Users Urged to Update Immediately

Google has released an urgent security update for Chrome desktop (version 146.0.7680.177/.178 for Windows/Mac, 146.0.7680.177 for Linux) to patch 21…
Read More »
April 1, 2026

PoC Exploit Code Published for nginx-ui Backup Restore Security Flaw

A critical security flaw in the nginx-ui backup restore mechanism, tracked as CVE-2026-33026, allows attackers to manipulate encrypted backups and…
Read More »
April 1, 2026

North Korean Hackers Breach Axios Package, Target Windows, macOS, and Linux Systems

A North Korea–nexus threat actor hijacked the popular Axios NPM package in a high‑impact software supply chain attack, deploying a…
Read More »
March 31, 2026

Apple Adds ClickFix Attack Warnings in New macOS Tahoe Security Feature

Apple has silently introduced a new security mechanism in macOS Tahoe 26.4 to protect users against social engineering campaigns known…
Read More »
March 31, 2026

PNG Vulnerabilities Allow Attackers to Trigger Crashes and Leak Sensitive Data

Security researchers have disclosed two high-severity vulnerabilities in libpng, the widely deployed reference library used for processing Portable Network Graphics…
Read More »
March 31, 2026

Axios NPM Packages Breached in Ongoing Supply Chain Attack

A severe supply chain attack has compromised the widely used Axios HTTP client on the npm registry. Attackers injected a…
Read More »

Previous page Next page