Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Microsoft Discovers Advanced XCSSET Malware Variant Threatening macOS Security
Microsoft Threat Intelligence researchers have uncovered a sophisticated update to the XCSSET malware, marking its first major evolution since 2022. ...
Critical Security Alert: Hackers Exploit Signal’s Device Linking Feature in Sophisticated Attack Campaign
Google’s Threat Intelligence Group (TIG) has uncovered a sophisticated attack campaign targeting Signal messenger users worldwide. The attack exploits Signal’s ...
FinalDraft: Advanced Malware Leverages Microsoft 365 for Covert Operations
Security researchers at Elastic Security Labs have uncovered a sophisticated new malware family dubbed FinalDraft, which employs an innovative technique ...
Critical Authentication Bypass Vulnerability Discovered in Palo Alto Networks Firewalls
Cybersecurity researchers have detected widespread exploitation attempts targeting a newly discovered critical vulnerability (CVE-2025-0108) in Palo Alto Networks’ PAN-OS firewall ...
X (Former Twitter) Implements Selective Blocking of Signal.me URLs: Security Analysis
A significant development in digital communications security has emerged as X (formerly Twitter) implements new restrictions targeting Signal’s secure messaging ...
Microsoft Patches Critical Zero-Day Privilege Escalation Vulnerability in Power Pages Platform
Microsoft has released an emergency security update addressing a critical privilege escalation vulnerability (CVE-2025-24989) in its Power Pages platform. The ...
Google Implements Critical Security Feature to Combat Phone-Based Social Engineering Attacks on Android
Google has announced a groundbreaking security enhancement for its Android operating system, introducing a sophisticated protection mechanism that prevents critical ...
Critical Authentication Bypass Vulnerability in SonicWall Firewalls Under Active Attack
Cybersecurity researchers have detected active exploitation of a critical vulnerability (CVE-2024-53704) affecting SonicWall firewall devices. The flaw enables threat actors ...
North Korean Hackers Launch Sophisticated Supply Chain Attacks with Novel Marstech1 Malware
SecurityScorecard researchers have uncovered a significant cyber espionage campaign dubbed “Marstech Mayhem,” orchestrated by North Korea’s notorious Lazarus Group. The ...
Critical Alert: New Device Authorization Code Attack Threatens Microsoft 365 Enterprise Security
Microsoft’s Threat Intelligence team has identified a sophisticated phishing campaign orchestrated by the threat actor group Storm-2372, targeting enterprise Microsoft ...