Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
VolkLocker Ransomware: Critical Crypto Flaw May Let Victims Recover Data for Free
A new ransomware-as-a-service (RaaS) operation, VolkLocker, run by the pro-Russian hacktivist group CyberVolk, has entered the cybercrime market — but ...
Forumnyy Troll Targets Academics with Fake Plagiarism Checks and Commercial Spyware
In October 2025, Kaspersky researchers detected a new wave of targeted cyber‑espionage attacks linked to the threat actor known as ...
France’s Interior Ministry Hit by Cyber Attack Targeting Government Email Servers
The French Ministry of the Interior has confirmed a significant cybersecurity incident in which attackers gained unauthorised access to the ...
New Steam Phishing Campaign Targets Russian Gamers With Fake Gift Cards and Twitch Drops
Gamers are facing a new, large‑scale Steam phishing campaign designed to steal accounts and drain valuable in‑game items. Analysts from ...
GhostPoster Malware Hides in Firefox Extensions via Steganographic PNG Logos
Security researchers at Koi Security have uncovered a large-scale malicious campaign, dubbed GhostPoster, that abuses Firefox browser extensions. Attackers embedded ...
Critical Notepad++ Auto-Update Vulnerability Fixed in Version 8.8.9
Developers of the popular text editor Notepad++ have released version 8.8.9 to close a critical vulnerability in the application’s auto-update ...
MITRE’s 2025 CWE Top 25: Most Dangerous Software Weaknesses Security Teams Cannot Ignore
MITRE has published the updated annual ranking of the Top 25 Most Dangerous Software Weaknesses, better known as the CWE ...
Pornhub Data Breach: Mixpanel Disputes Involvement as ShinyHunters Claim Massive Analytics Leak
The reported Pornhub data breach, allegedly exposing premium subscribers’ viewing and search histories, has rapidly become a benchmark case in ...
New Windows RasMan Zero-Day: DoS Vulnerability in Remote Access Connection Manager and 0patch Micropatch
A new Windows zero-day vulnerability has been identified in the Remote Access Connection Manager (RasMan) service, enabling a local user ...
Apple Fixes Two Actively Exploited WebKit Zero‑Days in Emergency Security Updates
Apple has released a series of unscheduled security updates to address two zero‑day vulnerabilities in the WebKit browser engine. According ...