Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
New Zero-Day Windows Vulnerability Allows Credential Theft Through Simple File Preview
Security researchers at 0patch have uncovered a critical zero-day vulnerability affecting all major versions of Windows that enables attackers to ...
Major Security Breach at Byte Federal Exposes Customer Data Through GitLab Vulnerability
Byte Federal, the leading cryptocurrency ATM operator in the United States, has disclosed a significant security breach that compromised sensitive ...
Security Researchers Uncover Sophisticated Android Surveillance Tool EagleMsgSpy Used by Chinese Authorities
Cybersecurity researchers at Lookout have uncovered a sophisticated Android surveillance tool dubbed EagleMsgSpy, revealing its extensive deployment by Chinese law ...
Critical Security Flaw in WPForms Plugin Threatens WordPress Payment Processing
A severe security vulnerability has been discovered in WPForms, one of WordPress’s most popular form builder plugins, potentially affecting over ...
Researchers Discover Novel QR Code Technique to Circumvent Browser Isolation Protection
Cybersecurity researchers at Mandiant have uncovered a groundbreaking attack technique that exploits QR codes to bypass browser isolation security measures, ...
Critical Vulnerability in Hunk Companion WordPress Plugin Threatens Over 9,000 Websites
Cybersecurity researchers have identified an actively exploited critical vulnerability in the widely-used WordPress plugin Hunk Companion. The security flaw, designated ...
AuthQuake: Critical Security Flaw Discovered in Microsoft’s Multi-Factor Authentication System
Security researchers at Oasis Security have unveiled a significant vulnerability in Microsoft’s Multi-Factor Authentication (MFA) system, dubbed “AuthQuake.” This critical ...
Security Researcher Uncovers Critical Vulnerabilities in OpenWRT’s ASU System
A critical security vulnerability in OpenWRT’s Attended SysUpgrade (ASU) system has been identified, potentially enabling malicious actors to distribute compromised ...
Critical Supply Chain Attack Compromises Ultralytics YOLO Library, Affects Thousands of Users
Cybersecurity researchers have uncovered a sophisticated supply chain attack targeting the widely-used Ultralytics YOLO computer vision library. The compromise involved ...
Major Cyberattack: Romania’s Electrica Group Targeted by Lynx Ransomware Operation
Romania’s National Cyber Security Directorate (DNSC) has confirmed a ransomware attack targeting Electrica Group, the country’s largest energy distributor with ...
