Vulnerabilities

Sapphire Sleet uses fake job offers and phony Zoom updates to deliver ClickFix attacks that steal credentials and sensitive data f…

A benign looking update Dragon Boss pushed out in March 2025 established persistence via scheduled tasks and arranged for future p…

Cybersecurity researchers have warned of an active malicious campaign that's targeting the workforce in the Czech Republic with a …

Threat actors know how to bypass security systems outside of traditional IT environments. Implementing 2FA could provide a needed …

The Secure Boot refresh is one of the largest coordinated security maintenance efforts across the Windows ecosystem, Microsoft sai…

You know that feeling when you open your feed on a Thursday morning and it's just... a lot? Yeah. This week delivered. We've got h…

Cisco has announced patches to address four critical security flaws impacting Identity Services and Webex Services that could resu…

A "novel" social engineering campaign has been observed abusing Obsidian, a cross-platform note-taking application, as an initial …

The Computer Emergencies Response Team of Ukraine (CERT-UA) has disclosed details of a new campaign that has targeted governments …

While enterprises breaches make more headlines, smaller incidents tend to be under-reported, if at all, allowing campaigns to last…

Attackers can abuse the near-maximum severity flaw in nginx-ui to restart, create, modify, and delete NGINX configuration files.…

Regulatory differences, interconnected digital ecosystems, and the rise of AI have created a complex supply chain Asian organizati…