A persistent malvertising campaign is plaguing Facebook, leveraging the reputations of well-known cryptocurrency exchanges to lure victims into a maze of malware. Since Bitdefender Labs started...
The data dump will likely shed light on LockBit’s recent activity and help law enforcement trace cryptocurrency transactions
The Russia-linked threat actor known as COLDRIVER has been observed distributing a new malware called LOSTKEYS as part of an espionage-focused campaign using ClickFix-like social engineering...
Ransomware operations are using legitimate Kickidler employee monitoring software for reconnaissance, tracking their victims' activity, and harvesting credentials after breaching their networks. [...]
DigiCert survey finds only 5% of global businesses are using post-quantum cryptography
CERT Polska has received a report about 2 vulnerabilities (CVE-2025-3758 and CVE-2025-3759) found in Netis Systems WF2220 software.
The Nmap Project has officially launched the highly anticipated Nmap 7.96, bringing a wealth of new features, performance upgrades, and bug fixes to the popular network scanning tool. As a...
The venture capital firm has over $90 billion in assets under management, including cybersecurity giants.
The UK government is set to prioritize increasing the number of UK organizations who are Cyber Essentials certified over the coming year
Venture capital firm Insight Partners has confirmed that sensitive data for employees and limited partners was stolen in a January 2025 cyberattack. [...]
South African Airways (SAA), the country's flag carrier, has confirmed that it suffered a significant cyber incident on Saturday, May 3, 2025. The SAA data breach caused temporary disruptions to...
Medical technology company Masimo Corporation disclosed that it experienced unauthorized activity on its on-premise network, affecting manufacturing operations.... The post Masimo faces...
Cisco has released software fixes to address a maximum-severity security flaw in its IOS XE Wireless Controller that could enable an unauthenticated, remote attacker to upload arbitrary files to a...
The UK government unveiled two new assessment schemes to boost confidence in the security of products and services during CYBERUK
A new spam campaign is targeting Brazilian users with a clever twist — abusing the free trial period of trusted remote monitoring tools and the country’s electronic invoice system to spread...
Since the start of the year, the Russian state-backed ColdRiver hacking group has been using new LostKeys malware to steal files in espionage attacks targeting Western governments, journalists,...
Cisco has rolled out software patches to address a severe security vulnerability, tracked as CVE-2025-20188, in its IOS XE Wireless Controller software. The flaw, which has been assigned the...
Researchers spot in-the-wild exploits of Samsung MagicInfo despite recent patch
In a warning that could not be more direct, Europol — the European Union’s law enforcement agency — has urged citizens to remain vigilant against a rising wave of phone scams, spoofed emails, and...
Organizations can start defending against deepfakes now, before efficient detectors are available
Vulnerability management remains core to reducing cyber risk — but as the attack surface grows, teams need a risk-driven strategy that looks beyond vulnerabilities to see the bigger picture....
Members of the U.S. House Committee on Homeland Security reached out to Kristi Noem, Department of Homeland Security... The post US lawmakers demand DHS threat assessment on China’s intelligence...
PwC and Cynalytica announced on Wednesday a partnership that marks a significant evolution in how critical infrastructure organizations... The post GISEC Global 2025: PwC and Cynalytica forge OT...
Exposure management company Tenable announced it has moved its operations center to the Landmark TLV Building in Tel... The post Tenable establishes Tel Aviv hub to drive growth and R&D, doubles...
Security researchers at Aon have discovered a threat actor who bypassed SentinelOne EDR protection to deploy Babuk ransomware
SonicWall has urged its customers to patch three security vulnerabilities affecting its Secure Mobile Access (SMA) appliances, one of them tagged as exploited in attacks [...]
Learn how attackers exploit Pluggable Authentication Modules (PAM) for credential harvesting—and discover defenses to harden Linux authentication.
In July 2016, the now defunct free online games list website OnRPG suffered a data breach that was later redistributed as part of a larger corpus of data. The incident exposed just over 1M email...
Imagine you're checking the Bitcoin price first thing in the morning, feeling good about your growing portfolio, when suddenly—bam! You realize your digital wallet has been hacked. Everything's...
Autonomous system numbers are like the address book of the internet, and not every IP address belongs to a “friendly” address. Learn more about how the Huntress Hunt & Response teams utilize ASNs.