Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Dark Applications and AI Agents: Closing the Identity Confidence Gap in Zero Trust Programs
By 2026, many enterprises report mature identity and access management (IAM) and Zero Trust security programs on paper, yet their ...
Axios npm Compromise Exposes Coordinated Supply Chain Attacks on Node.js Maintainers
The recent Axios npm compromise has turned out not to be an isolated incident but part of a coordinated software ...
GPU RowHammer Attacks: GPUBreach, GDDRHammer and GeForge Threaten Cloud AI Security
Recent academic research has shown that modern high‑performance graphics processing units (GPUs) are vulnerable to a new class of RowHammer ...
Hasbro Cyber Attack: Analysis of the 2025 Security Incident and Supply Chain Risks
Global toy and entertainment giant Hasbro has reported a significant cybersecurity incident that could disrupt parts of its operations for ...
Storm-1175 Uses Zero-Day Vulnerabilities to Deliver Medusa Ransomware in Rapid Attacks
A China-based cybercriminal group tracked by Microsoft Threat Intelligence as Storm-1175 is conducting highly automated, high-speed attacks against internet-facing systems ...
Flowise Vulnerability CVE-2025-59528: Critical RCE Threat to AI Infrastructure
The open‑source AI orchestration platform Flowise has been hit by a critical security vulnerability, tracked as CVE-2025-59528 with the maximum ...
Iran-Linked Microsoft 365 Password Spraying and Ransomware Campaigns Target Global Organizations
A large-scale password spraying campaign against Microsoft 365 (M365) tenants has been observed amid escalating tensions in the Middle East. ...
Chinese Cyber-Espionage Group TA416 Renews Attacks on EU, NATO and Middle East
Chinese-aligned threat actor TA416 has restarted large-scale cyber-espionage operations against European governmental and diplomatic entities and is now extending its ...
Axios npm Package Compromised in Targeted Supply Chain Attack Linked to UNC1069
The Axios JavaScript library, one of the most downloaded packages in the npm ecosystem with around 100 million weekly installs, ...
Malicious npm Strapi Plugins Highlight Escalating Software Supply Chain Threats
A campaign involving 36 malicious npm packages disguised as plugins for the Strapi CMS has exposed how easily attackers can ...
