web

March 7, 2026

Malicious Browser Add‑on Targets imToken Users’ Private Keys

Socket’s Threat Research Team has uncovered a highly deceptive Google Chrome extension designed to steal private keys and seed phrases…
Read More »
March 5, 2026

Cisco Secure Firewall Vulnerability Exposes Networks to Authentication Bypass Attacks

Cisco has publicly revealed a critical security flaw within its Secure Firewall Management Centre (FMC) Software, enabling remote attackers to…
Read More »
March 4, 2026

AI Accelerates High-Velocity Cyber Attacks

Cyberattacks are shifting from “breaking in” to simply “logging in,” with AI now automating high-speed operations that overwhelm human defenders.…
Read More »
March 4, 2026

Iranian APT Groups Intensify Cyberattacks on Critical Infrastructure Amid Rising Geopolitical Tensions

A dramatic escalation in Middle Eastern tensions began last week with Operation Lion’s Roar, a joint U.S.-Iranian military strike on…
Read More »
March 4, 2026

Honeywell Controllers Widely Exposed Without Authentication

Security researchers at Zero Science Lab have disclosed a critical vulnerability in Honeywell’s Trend IQ4xx series of Building Management System…
Read More »
March 4, 2026

HPE AutoPass Vulnerability Allows Remote Attackers to Bypass Authentication

Hewlett Packard Enterprise (HPE) has disclosed a remote authentication-bypass vulnerability in HPE AutoPass License Server (APLS) that could let unauthenticated…
Read More »
March 3, 2026

Google Chrome Introduces Merkle Tree Certificates to Protect HTTPS from Quantum Attacks

Google Chrome’s Secure Web and Networking Team has announced a new effort to protect HTTPS traffic from upcoming quantum‑computing attacks.…
Read More »
March 3, 2026

AuraStealer Infostealer Targeting Users with 48 C2 Domains in Ongoing Campaigns

Threat actors are actively deploying a new infostealer dubbed “AuraStealer,” backed by a growing customer base, 48 identified command‑and‑control (C2)…
Read More »
February 11, 2026

Hackers Weaponize 7-Zip Downloads to Turn Home PCs Into Proxy Nodes

A fake website impersonating the popular 7-Zip file archiver has been distributing malicious software that secretly converts infected computers into…
Read More »
December 20, 2025

New Kibana Vulnerabilities Allow Attackers to Embed Malicious Scripts

Elastic has recently released critical security updates to address a severe cross-site scripting (XSS) vulnerability that affects multiple versions of…
Read More »
December 19, 2025

Microsoft Patches MSMQ Flaw That Affects IIS Web Servers

Microsoft has issued an emergency security update to fix a critical vulnerability in the Message Queuing (MSMQ) feature, which affects…
Read More »
December 19, 2025

Beware of Malicious Scripts in Weaponized PDF Purchase Orders

A sophisticated phishing campaign utilizing a weaponized PDF document named “NEW Purchase Order # 52177236.pdf” has been identified, employing legitimate…
Read More »
December 17, 2025

CISA Alerts on Apple WebKit Zero-Day Actively Used in Cyberattacks

The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical zero-day vulnerability affecting multiple Apple products to its Known…
Read More »
December 16, 2025

Link11 Identifies Five Cybersecurity Trends Shaping European Defense Strategies in 2026

Link11, a leading European provider of web infrastructure security solutions, has released new insights highlighting five key cybersecurity developments that…
Read More »
December 16, 2025

SantaStealer Malware Steals Sensitive Files, Credentials, and Crypto Wallet Data

Cybersecurity researchers at Rapid7 Labs have discovered a new and sophisticated threat: SantaStealer, a malware-as-a-service information stealer that is being…
Read More »
December 16, 2025

ZnDoor Malware Actively Exploits React2Shell to Breach Network Infrastructure

Since December 2025, security operations centers have identified a rising threat targeting Japanese enterprises through the exploitation of React2Shell (CVE-2025-55182),…
Read More »
December 14, 2025

Apple Confirms Zero-Day Exploitation in Targeted Attacks on iPhone Users

Apple has recently released critical security patches to address two zero-day vulnerabilities that are being actively exploited on iPhone and…
Read More »
December 13, 2025

Research Findings on the Fate of Data Stolen in Phishing Attacks

Recent research conducted by Kaspersky has shed light on the entire lifecycle of data stolen during phishing attacks, exposing a…
Read More »
December 13, 2025

Surge in Attacks Targeting RSC-Enabled Services Worldwide

In December 2025, CVE-2025-55182 (React2Shell), a vulnerability in React Server Components (RSC) that enables remote code execution (RCE), was publicly…
Read More »
December 12, 2025

644K+ Websites at Risk Due to Critical React Server Components Flaw

A critical vulnerability known as “React2Shell” has been identified by the Shadowserver Foundation, posing a significant threat to a massive…
Read More »

Previous page Next page