Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Living off the Land Attacks: How to Control Your Internal Attack Surface
Security models built around the principle of “find the malicious file, block the attack” are rapidly losing effectiveness. Modern adversaries ...
Axios npm Package Compromised in North Korean Supply Chain Attack Targeting Developers
The widely used JavaScript HTTP client Axios has become the center of a significant software supply chain attack. Google Threat ...
Google Rolls Out Mandatory Android Developer Verification as Apple Tightens Wearable Privacy Rules
Major platform providers are simultaneously raising the bar for mobile security. Google is introducing mandatory identity verification for Android developers ...
AtlasCross RAT: Silver Fox Targets Chinese-Speaking Users via Fake VPN and Messaging Sites
A large-scale malware campaign is distributing a new remote access trojan, AtlasCross RAT, by impersonating popular VPN, messaging, video conferencing ...
ChatGPT DNS Data Exfiltration Vulnerability and OpenAI Codex Command Injection Raise AI Security Concerns
Recent research by Check Point and BeyondTrust Phantom Labs has revealed critical security weaknesses in two widely used OpenAI services: ...
GitGuardian State of Secrets Sprawl 2026: AI, DevOps and the Explosion of Machine Identities
The latest GitGuardian State of Secrets Sprawl 2026 report shows that hardcoded secrets in code and infrastructure are not just ...
Chinese Cyber Espionage Operation Targets Southeast Asian Government with USB Malware and Advanced RATs
A government organization in Southeast Asia has been hit by a large-scale cyber espionage campaign that Palo Alto Networks’ Unit ...
Iran-Linked Handala Hack Team Targets FBI Email and Stryker in Destructive Cyber Attacks
The Iran-aligned Handala Hack Team, believed to be operating on behalf of Iran’s Ministry of Intelligence and Security (MOIS), has ...
Citrix NetScaler CVE-2026-3055: Critical SAML IDP Vulnerability Under Active Reconnaissance
A new critical vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway, tracked as CVE-2026-3055 with a CVSS score of ...
CVE-2025-53521: Critical F5 BIG-IP APM Vulnerability Added to CISA KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw in F5 BIG-IP Access Policy Manager (APM), ...
