Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Advanced Phishing Attack Threatens CS2 Players Through Fake Steam Login Windows
Security researchers at Silent Push have uncovered a sophisticated phishing campaign targeting Counter-Strike 2 players through an advanced browser-in-the-browser (BiTB) ...
Critical Security Threat: Ransomware Found in Visual Studio Code Extensions
Security researchers at ReversingLabs have uncovered a significant security breach in the Visual Studio Code marketplace, where two extensions were ...
GitHub Actions Supply Chain Attack Investigation: Targeted Coinbase Attempt Leads to Broader Impact
Cybersecurity researchers have concluded their investigation into a sophisticated supply chain attack targeting GitHub Actions, revealing that while 23,000 repositories ...
Widespread DrayTek Router Outages Trigger International Cybersecurity Alert
A significant global security incident affecting DrayTek routers has emerged, causing widespread disruptions across multiple countries. Network administrators and security ...
Critical Remote Code Execution Vulnerability Discovered in Veeam Backup & Replication
Security researchers at watchTowr Labs have uncovered a severe remote code execution (RCE) vulnerability in Veeam Backup & Replication, a ...
Major DDoS Attacks Prompt Security Overhaul in World of Warcraft Classic Hardcore Mode
Blizzard Entertainment has implemented significant security policy changes for World of Warcraft Classic’s hardcore mode following a series of sophisticated ...
Critical Security Breach Exposes Configuration Data of Keenetic Router Users Worldwide
A significant data breach affecting Keenetic router users has been revealed by CyberNews, exposing sensitive network configurations and device settings ...
Cloudflare Announces Mandatory HTTPS for API Communications: A Critical Security Enhancement
Cloudflare has announced a significant security enhancement for its API infrastructure, mandating HTTPS-only connections starting March 20, 2025. This decisive ...
Critical Security Breach Discovered in Oracle Cloud Infrastructure Exposing Millions of User Records
A significant security breach has been discovered in Oracle’s cloud infrastructure, potentially exposing sensitive data of over 6 million users. ...
Critical Authentication Bypass Vulnerability in CrushFTP Puts Enterprise Servers at Risk
Security researchers have identified a critical vulnerability (CVE-2025-2825) in CrushFTP software that enables unauthorized access to servers through HTTP(S) ports. ...
