CISA flags Array Networks flaw CVE-2023-28461 for active exploitation; agencies urged to patch by December 16.

Cybersecurity researchers have disclosed two new attack techniques against infrastructure-as-code (IaC) and policy-as-code ...

Signs of malicious activity were first spotted in version 0.1.13 of the library, which included a change to the Python script ...

Verizon DBIR shows 180% surge in vulnerability exploits. Learn Zero Trust principles to counter modern threats.

Google has introduced a new feature called Restore Credentials to help users restore their account access to third-party apps ...

Discover how modern phishing attacks use advanced evasion techniques to bypass security and target sensitive data.

From state-sponsored hacks targeting telecom giants to critical vulnerabilities putting thousands at risk, this week’s news ...

Microsoft and Google expose China-based cyber threats Storm-2077 and GLASSBRIDGE, targeting U.S. agencies and amplifying ...

The North Korea-linked threat actor known as Sapphire Sleet is estimated to have stolen more than $10 million worth of ...

APT-K-47, aka Mysterious Elephant, exploits Hajj themes and Asyncshell malware in Pakistan-targeted cyberattacks.

Cybersecurity researchers have discovered two malicious packages uploaded to the Python Package Index (PyPI) repository that ...

TAG-110's use of HATVIBE and CHERRYSPY was first documented by CERT-UA back in late May 2023 in connection with a cyber attack targeting state agencies in Ukraine. Both the malware families were again ...