Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Unpatched D-Link DIR-878 Vulnerabilities Put Home and Office Routers at Risk
The popular dual-band router D-Link DIR-878, widely used in homes and small offices, has been found to contain several serious ...
Microsoft Shuts Down KMS38 Offline Activation: Security and Compliance Implications for Windows Environments
Microsoft has effectively shut down one of the most widely used illicit activation methods for Windows—KMS38. Users report that the ...
RondoDox Botnet Exploits Critical XWiki CVE-2025-24893 RCE Vulnerability
A critical remote code execution (RCE) vulnerability CVE-2025-24893 in XWiki Platform is being actively exploited by the emerging RondoDox botnet, ...
Anthropic’s 90% Automated Cyberespionage Claim Draws Industry Skepticism—and Practical Lessons for Defenders
Anthropic reports it detected and disrupted a large-scale cyberespionage operation attributed to Chinese-linked group GTG-1002, asserting that up to 90% ...
Fortinet warns of active attacks exploiting FortiWeb CVE‑2025‑64446
Fortinet has confirmed broad, in‑the‑wild exploitation of a critical zero‑day vulnerability in the FortiWeb web application firewall (WAF). Tracked as ...
Protei Cyberattack Exposes DPI/SORM Vendor Risks for Global Telecom Operators
An extensive cybersecurity incident has reportedly hit international telecom solutions vendor Protei, with an unknown hacking group claiming to have ...
Aisuru IoT Botnet Hits Microsoft Azure with 15.72 Tbps DDoS Attack
The Microsoft Azure cloud platform has become the target of one of the most powerful distributed denial-of-service (DDoS) attacks reported ...
Cloudflare Outage: How a ClickHouse Permission Change Triggered a Global Bot Management Failure
On 18 November 2025, Cloudflare, one of the world’s largest CDN and network security providers, experienced one of its most ...
CVE-2025-9501: Critical W3 Total Cache Vulnerability Allows Unauthenticated RCE in WordPress
A newly disclosed flaw in the popular WordPress performance plugin W3 Total Cache exposes over a million websites to a ...
WhatsApp Phone Number Enumeration Exposes 3.5 Billion User Accounts
Researchers from the University of Vienna have demonstrated how a legitimate feature in WhatsApp can be turned into a powerful ...
