Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Kaspersky Uncovers Advanced Cryptocurrency Scam Using Legitimate Wallet Credentials
Kaspersky’s cybersecurity researchers have uncovered a sophisticated cryptocurrency scam targeting digital asset holders through YouTube’s comment sections. The fraudsters employ ...
New Modular PHP Backdoor ‘Glutton’ Discovered: Advanced Threat Actor Targets Both Organizations and Cybercriminals
Security researchers at QAX XLab have uncovered a sophisticated modular PHP backdoor named Glutton, attributed to the notorious Advanced Persistent ...
Kali Linux 2024.4: Critical Updates Reshape Penetration Testing Platform
Offensive Security has unveiled Kali Linux 2024.4, introducing substantial improvements to their industry-leading penetration testing distribution. This final release of ...
Lazarus Group Expands DreamJob Operation with Sophisticated Attacks on Nuclear Industry
Kaspersky Lab researchers have uncovered a significant escalation in the DreamJob cyber espionage campaign, orchestrated by the notorious North Korean-linked ...
Critical Privacy Flaws Discovered in Microsoft’s New Recall Feature for Windows
Microsoft’s recent resumption of testing for its AI-powered Recall feature in the Windows Insider program has sparked significant privacy concerns ...
Healthcare SaaS Provider Phreesia Reports Massive Data Breach Affecting Nearly 1 Million Patients
A significant cybersecurity incident has been disclosed by Phreesia, a leading healthcare SaaS solutions provider, revealing a prolonged data breach ...
Critical DrayTek Router Vulnerabilities Lead to Large-Scale Ransomware Campaign
Security researchers at Forescout have uncovered a sophisticated cyber attack campaign targeting corporate networks through previously unknown vulnerabilities in DrayTek ...
Critical Apache Struts 2 Vulnerability Enables Remote Code Execution: Immediate Action Required
Cybersecurity researchers have identified active exploitation of a critical vulnerability in Apache Struts 2, a widely-used web application framework. The ...
U.S. Government Launches Multi-Agency Investigation into TP-Link’s Network Equipment Security and Market Practices
The U.S. Departments of Justice, Commerce, and Defense have launched a joint investigation into TP-Link’s operations, focusing on potential national ...
Ukrainian Developer Behind Raccoon Infostealer Malware Sentenced to 5 Years in Prison
In a significant development for global cybersecurity, a U.S. federal court has sentenced Mark Sokolovsky, the 28-year-old Ukrainian developer of ...