Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
7-Zip CVE-2025-11001 Actively Exploited on Windows: Critical Update to Version 25.00
The widely used open-source archiver 7-Zip, long perceived as a safe and reliable utility, is now at the center of ...
Critical ImunifyAV/Imunify360 AI-bolit RCE Patched; Shared Hosting at High Risk
CloudLinux has released a fix for a critical remote code execution (RCE) vulnerability in AI-bolit, the malware scanner component bundled ...
Rhadamanthys Info-Stealer Disruption: Signs of German Law-Enforcement Action
Dozens of paying clients of the Rhadamanthys info-stealer report sudden loss of access to their servers and web control panels. ...
Anthropic: Chinese APT GTG-1002 Orchestrates Agentic AI Attacks with Claude Code and MCP
Anthropic has disclosed a mid-September 2025 campaign in which the Chinese-linked APT group GTG-1002 used agentic artificial intelligence—specifically Claude Code ...
Microsoft November Patch Tuesday: 63 Windows Flaws Fixed, Active Zero‑Day in Kernel and Critical RCEs
Microsoft’s latest Patch Tuesday resolves 63 vulnerabilities across Windows and related components. The release includes an actively exploited zero‑day in ...
Most Common Passwords in 2025 Leaks: What Comparitech Found and How to Secure Your Accounts
Comparitech analyzed more than two billion passwords leaked in 2025 and circulating across hacker forums, Telegram channels, and other marketplaces. ...
Midnight Ransomware Hit by RSA Flaw: Norton Releases Free Decryptor for Windows
Cybersecurity researchers have identified a critical cryptographic weakness in the new Midnight ransomware, a strain derived from the leaked Babuk ...
IndonesianFoods worm overwhelms npm with 100k+ spam packages
A new self-replicating campaign is saturating the npm ecosystem with spam packages. The worm, tracked as IndonesianFoods, is publishing new ...
UK Sentences Zhimin Qian for Crypto Laundering; Police Seize 61,000 BTC Linked to China’s Largest Ponzi Scheme
A London court has sentenced 47‑year‑old Zhimin Qian, also known as Yadi Zhang, to 11 years and 8 months in ...
Uhale digital photo frames silently load malware via v4.2.0 update, with ties to the Vo1d botnet
Security researchers at Quokka report that multiple digital photo frames built on the Uhale platform (part of the ZEASN ecosystem, ...
