The flaw is able to skirt past your usual security protection and evade detection, but Microsoft has a patch.
More than two dozen states have sued 23andMe to block the sale of genetic data without customers' permission.
Google has added new enterprise-scale security protections for your organization's Android devices. Here's what they do.
A new attack dubbed 'EchoLeak' is the first known zero-click AI vulnerability that enables attackers to exfiltrate sensitive data from Microsoft 365 Copilot from a user's context without interaction. [...]
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed three zero-day vulnerabilities in catdoc, as well as vulnerabilities in Parallel, NVIDIA and High-Logic FontCreator 15.
INTERPOL disrupts 20,000 infostealer domains in major cybercrime crackdown across Asia-Pacific, 32 arrested, 216K victims notified in Operation Secure.
Microsoft has released patches to fix 67 security flaws, including one zero-day bug in Web Distributed Authoring and Versioning (WEBDAV) that it said has come under active exploitation in the...
Interpol-coordinated Operation Secure led to 32 arrests, including the suspected ringleader of a cybercriminal organization
FIN6, a financially motivated group tracked for years by cybersecurity researchers, is now lurking on sites such as LinkedIn and Indeed to spread malware, a new report says.
AppOmni research reveals over 20 security vulnerabilities, including zero-days, in the Salesforce Industry Cloud. Learn about critical risks, customer responsibilities, and how to protect sensitive data.
A new critical zero-day RCE vulnerability in Microsoft Windows, tracked as CVE-2025-33053, has been actively exploited by the Stealth Falcon (aka FruityArmor) APT group. The flaw leads to RCE by...
As the digital landscape continues to evolve in complexity, the number of discovered vulnerabilities is growing at an unprecedented pace, placing increasing pressure on cybersecurity teams. So far...
The Aqara Camera Hub G5 Pro combines AI-powered visual recognition technology with a host of home security features.
As cloud adoption accelerates, security operations teams must rethink their people, processes, and technology to enable effective Cloud Detection and Response (CDR) and secure their evolving cloud...
Insights from 96 organizations on the state of AI security in the cloud.
An APT hacking group known as 'Stealth Falcon' exploited a Windows WebDav RCE vulnerability in zero-day attacks since March 2025 against defense and government organizations in Turkey, Qatar,...
A new cybersecurity Executive Order aims to modernize federal cybersecurity with key provisions for post-quantum encryption, AI risk and secure software development.On June 6, 2025, the White...
Microsoft confirmed on Tuesday that it's pushing a revised security update targeting some Windows 11 24H2 systems incompatible with the initial update released during this month's Patch Tuesday. [...]
An ISC2 study found that 90% of security hiring managers would consider entry-level candidates with only previous IT work experience
New research from Bitsight reveals that thousands of internet-connected cameras, originally intended for protection, are now creating serious... The post Bitsight reveals global surge in exposed,...
Researchers from SentinelOne have linked the PurpleHaze and ShadowPad activity clusters to China-aligned threat actors with high confidence.... The post SentinelOne links ShadowPad and PurpleHaze...
Xona and Forescout have announced a partnership to deliver secure remote access and enhanced cybersecurity for operational technology... The post Xona, Forescout partner to strengthen OT...
As part of its ongoing commitment to advancing innovation and the safe adoption of new technologies for maritime... The post Cydome announces membership in NVIDIA Inception Program appeared first...
iOT365, a vendor of OT (operational technology) and IoT cybersecurity, announced a partnership with Check Point Software Technologies... The post iOT365, Check Point Software partner to offer...
The products affected by the issues are part of the Salesforce OmniStudio suite, including FlexCards and Data Mappers
A coordinated campaign of brute-force attacks using hundreds of unique IP addresses targets Apache Tomcat Manager interfaces exposed online. [...]
Kaspersky GReAT experts discovered a new malicious implant: BrowserVenom. It enables a proxy in browsers like Chrome and Mozilla and spreads through a DeepSeek-mimicking phishing website.
Phishing-as-a-Service, or PhaaS, is a cybercrime model where threat actors offer phishing tools, kits and services to other attackers, often via subscription or one-time payment.
An international law enforcement action codenamed "Operation Secure" targeted infostealer malware infrastructure in a massive crackdown across 26 countries, resulting in 32 arrests, data seizures,...
Microsoft has resolved a known issue that caused some Windows Server 2025 domain controllers to become unreachable after a restart and triggered app or service failures. [...]