Iranian APT Infy resurfaced after years of silence, using updated Foudre & Tonnerre malware, phishing delivery, resilient C2 ...

The DOJ charged 54 people over Ploutus malware attacks on ATMs, linked to Tren de Aragua, causing $40.73 million in U.S.

A Russia-aligned threat group uses Microsoft 365 device code phishing to steal credentials and take over accounts, tracked ...

Nigeria police arrested the alleged RaccoonO365 phishing developer after a probe with Microsoft and the FBI, tied to stolen ...

UEFI firmware flaws in certain ASRock, ASUS, GIGABYTE, and MSI motherboards allow early-boot DMA attacks before OS security ...

WatchGuard fixed CVE-2025-14733, a critical Fireware OS VPN flaw with CVSS 9.3 that is actively exploited in the wild.

Researchers uncover malware campaigns using cracked software and compromised YouTube videos to deliver CountLoader, ...

Chainalysis reports North Korea-linked hackers stole $2.02B in crypto in 2025, accounting for most global thefts and major ...

HPE patched a critical OneView vulnerability with CVSS 10.0 that could allow unauthenticated remote code execution in ...

SonicWall released fixes for an actively exploited SMA 100 vulnerability enabling privilege escalation and chained root ...

Learn how the ShadyPanda campaign turned trusted browser extensions into spyware and the steps security teams can take to ...

Cisco confirms an unpatched CVSS 10.0 zero-day in AsyncOS actively exploited to gain root access on email security appliances ...