Seven vulnerabilities, including BootHole and PixieFail, in Palo Alto firewalls risk Secure Boot integrity and enable sophisticated attacks.

Fake CAPTCHA checks are spreading Lumma Stealer malware worldwide, targeting telecom, healthcare, and banking sectors ...

HellCat and Morpheus ransomware share identical code, relying on the Windows Cryptographic API for encryption.

Modern authentication technologies eliminate identity-based threats, including phishing and credential theft, impacting 90% ...

Critical SonicWall zero-day (CVE-2025-23006) in SMA 1000 appliances fixed. Rated 9.8 CVSS; patch now to prevent active ...

New research by web exposure management specialist Reflectiz reveals several alarming findings about the high number of ...

The BC malware has also been the subject of an independent analysis by Sophos, which attributed the artifacts to a threat ...

A third vulnerability patched by Cisco is CVE-2025-20128 (CVSS score: 5.3), an integer underflow bug impacting the Object ...

Google identifies TRIPLESTRENGTH targeting cloud platforms like AWS and Azure for cryptojacking and ransomware.

DHS terminates advisory committees, including CSRB, halting investigations into Chinese cyberattacks and AI safety.

PlushDaemon APT targets South Korean VPN with SlowStepper backdoor. Multistage DNS C&C protocol aids espionage.

New Murdoc_Botnet exploits CVE-2024-7029 and CVE-2017-17215 to infect 1,370+ devices, targeting IoT vulnerabilities for ...