Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Critical Windows 10 Update Addresses Severe Package Management Vulnerability
Microsoft has released an essential optional update KB5046714 for Windows 10 version 22H2, addressing a critical vulnerability that severely impacted ...
QNAP Halts Firmware Rollout After Users Report Widespread Authentication Problems
QNAP Systems’ QTS 5.2.2.2950 build 20241114 triggered widespread reports of authentication failures and application problems on some NAS deployments, prompting ...
Thai Police Disrupt Large-Scale Mobile Phishing Operation Using IMSI-Catcher Technology
Thai law enforcement authorities have successfully disrupted a sophisticated phishing operation that exploited cellular network vulnerabilities to distribute fraudulent SMS ...
Supply Chain Attack: Crypto Pay API Tokens Targeted Through Compromised Python Package
Cybersecurity researchers at Phylum have uncovered a sophisticated supply chain attack targeting cryptocurrency users through the compromised Python package aiocpa. ...
Researchers Uncover Massive Malware Campaign Using Outdated Avast Driver for Security Bypass
Security researchers at Trellix have discovered a sophisticated malware campaign leveraging an outdated Avast anti-rootkit driver to conduct widespread Bring ...
Critical Security Flaws in CleanTalk WordPress Plugin Put Over 200,000 Websites at Risk
Security researchers have uncovered two critical vulnerabilities in CleanTalk’s popular WordPress plugin “Spam protection, Anti-Spam, and FireWall,” potentially exposing over ...
Google’s Restore Credentials Technology Transforms Android Device Migration Security
Google has unveiled Restore Credentials, a groundbreaking security technology integrated into the Credential Manager API, revolutionizing how users transfer their ...
Banshee Stealer Source Code Leak Exposes Advanced macOS Malware Capabilities
A significant development in the cybersecurity landscape has emerged with the leaked source code of Banshee Stealer, a sophisticated macOS-targeted ...
Critical Security Threat: Malicious AI Development Packages Found in Python Package Index
Kaspersky Lab security researchers have uncovered a sophisticated supply chain attack targeting the Python Package Index (PyPI), where threat actors ...
Advanced Persistent Threat Group TaxOff Launches Sophisticated Attacks on Government Infrastructure
Russian cybersecurity firm BI.ZONE Threat Intelligence has documented a targeted APT campaign by a group they track as TaxOff, which ...
